Help with ldap query - show groups with X ammount of users

Forums

My Profile

Inbox

Address Book

My Subscription

My Forums

Help with ldap query - show groups with X ammount of users

Logged in as: Guest

arrSession:exec spGetSession 2,2,62651

	Active Users: There are 0 members and 0 guests.
	Users viewing this topic: none

Printable Version

All Forums >> [Scripting] >> WSH & Client Side VBScript >> Help with ldap query - show groups with X ammount of users
Do you like VisualBasicScript.com? Link to us and help spread the word about our forum. Thanks!

Page: [1]

Message

<< Older Topic Newer Topic >>

Help with ldap query - show groups with X ammount of users - 7/23/2008 5:45:47 PM

adija

Posts: 2
Score: 0
Joined: 7/23/2008
Status: offline

Hello,

I need a way to serach the whole Active Directory for groups that hold more than 3000 users.
I'm a total noob when it comes to AD commands and vbscript.
Can any1 give me a way , a clue , a direction on how to get a list from of AD groups that hold only 3000+ users ?

Thx Alot,

Adija

Post #: 1

RE: Help with ldap query - show groups with X ammount o... - 7/23/2008 11:52:05 PM

TomRiddle

Posts: 190
Score: 4
Joined: 2/7/2008
Status: offline

'Script by TomRiddle 2008
'Usage :- Run from command line like this
'cscript FindLargeGroup.vbs > output.txt
'Edit variable below to detect groups with more than that number of members.

MaxMembers=3000

on error resume next 
Dim objConnection, objCommand, objRootDSE, strDNSDomain 
Dim strFilter, strQuery, objRecordSet, strBase, strAttributes, strDN, UserName 
Set objConnection = CreateObject("ADODB.Connection") 
Set objCommand = CreateObject("ADODB.Command") 
objConnection.Provider = "ADsDSOOBject" 
objConnection.Open "Active Directory Provider" 
Set objCommand.ActiveConnection = objConnection 
Set objRootDSE = GetObject("LDAP://RootDSE") 
strDNSDomain = objRootDSE.Get("defaultNamingContext") 
strBase = "<LDAP://" & strDNSDomain & ">" 
strFilter = "(&(objectCategory=group)(name=*))" 
strAttributes = "distinguishedName" 
strQuery = strBase & ";" & strFilter & ";" & strAttributes & ";subtree" 
objCommand.CommandText = strQuery 
objCommand.Properties("Page Size") = 99999 
objCommand.Properties("Timeout") = 300 
objCommand.Properties("Cache Results") = False 
Set objRecordSet = objCommand.Execute 
objRecordSet.MoveFirst 
if err<>0 then wscript.echo "Not Found" 
on error goto 0 
Do Until objRecordSet.EOF 
strDN = objRecordSet.Fields("distinguishedName") 
CountGroupMembers strDN 
objRecordSet.MoveNext 
Loop 
objConnection.Close 
Set objConnection = Nothing 
Set objCommand = Nothing 
Set objRootDSE = Nothing 
Set objRecordSet = Nothing 
wscript.quit
'-------------------------------------------------------------------------------- 
Sub CountGroupMembers(strDN) 
on error resume next 
Set objGroup = GetObject ("LDAP://"& strDN) 
objGroup.getInfo 
arrMemberOf = objGroup.GetEx("member") 
For Each strMember in arrMemberOf 
MemberCount=MemberCount+1 
Next 
if err<>0 then 
wscript.echo objGroup.SAMAccountName & " Has "&MemberCount-1&" Members" 
else 
wscript.echo objGroup.SAMAccountName & " Has "&MemberCount&" Members" 
end if 
if MemberCount > MaxMembers then wscript.echo objGroup.SAMAccountName & "is a big group" 
end sub 
'--------------------------------------------------------------------------------

< Message edited by TomRiddle -- 7/24/2008 9:29:55 AM >

(in reply to adija)