AD Report Details

 

AD Admin & Reporting Tool and LDAP plus AD Help Desk Tool has a comprehensive list of Active Directory Object reports. All reports except for a few can be easily customized to fit your needs, you can easily add or remove more attributes to your report, set the report search base etc. You can also easily run the reports on different domain controllers. Below you can find detailed information on how these reports are created.

Active Directory All Objects Report

All Objects report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE
subtreescope

 

Active Directory All Objects Created Today Report

All Objects Created Today report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope

 

Active Directory All Objects Created Yesterday Report

All Objects Created Yesterday report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope

 

Active Directory All Objects Created in Last 7 Days Report

All Objects Created in Last 7 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where createTimestamp >= CurrentTimestamp -7 days subtreescope

 

Active Directory All Objects Created in Last 30 Days Report

All Objects Created in Last 30 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where createTimestamp >= CurrentTimestamp -30 days subtreescope

 

Active Directory All Objects Created in Last 60 Days Report

All Objects Created in Last 60 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where createTimestamp >= CurrentTimestamp -60 days subtreescope

 

Active Directory All Objects Created in Last 90 Days Report

All Objects Created in Last 90 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where createTimestamp >= CurrentTimestamp -90 days subtreescope

 

Active Directory All Objects Created between.. Report

All Objects Created between the dates specified report is created using the following sqlldap statement, you can specify from and to timestamp in the popup dialog.

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where createTimestamp >$TimeStamp1 and createTimestamp <= TimeStamp2 subtreescope

 

Active Directory All Objects Modified Today Report

All Objects Modified Today report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope

 

Active Directory All Objects Modified Yesterday Report

All Objects Modified Yesterday report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope

 

Active Directory All Objects Modified in Last 7 Days Report

All Objects Modified in Last 7 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where modifyTimestamp >= CurrentTimestamp -7 days subtreescope

 

Active Directory All Objects Modified in Last 30 Days Report

All Objects Modified in Last 30 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where modifyTimestamp >= CurrentTimestamp -30 days subtreescope

 

Active Directory All Objects Modified in Last 60 Days Report

All Objects Modified in Last 60 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where modifyTimestamp >= CurrentTimestamp -60 days subtreescope

 

Active Directory All Objects Modified in Last 90 Days Report

All Objects Modified in Last 90 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where modifyTimestamp >= CurrentTimestamp -90 days subtreescope

 

Active Directory All Objects Modified between.. Report

All Objects Modified between the dates specified report is created using the following sqlldap statement, you can specify from and to timestamp in the popup dialog.

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where modifyTimestamp >= $Timestamp1 and modifyTimestamp <= $Timestamp2 subtreescope

 

Active Directory All Objects Specified Attribute is null or not present

All Objects where specified attribute is null report is created using the following sqlldap statement, you can specifiy the attribute in the popup dialog.

Select mail, cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where $Attribute is null subtreescope

 

Active Directory All Objects Specified Attribute is not null or present

All Objects where specified attribute is not null report is created using the following sqlldap statement, you can specifiy the attribute in the popup dialog.

Select mail, cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where $Attribute is not null subtreescope

 


AD Admin & Reporting Tool or LDAP plus AD Help Desk Tool User Reports give detailed information on users, below you can find detailed information on how these reports are created.

Active Directory All Users Report

All Users report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 subtreescope

 

Active Directory Diabled Users Report

All Disabled Users report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and userAccountControl:1.2.840.113556.1.4.803:=2
subtreescope

 

Active Directory Enabled Users Report

All Enabled Users report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and userAccountControl:1.2.840.113556.1.4.803:!=2
subtreescope

 

Active Directory Locked Out Users Report

All Locked Out Users report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,lockoutTime from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lockoutTime>=1
subtreescope

 

Active Directory Users with Logon script

All Users with Logon Script report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,scriptPath from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and scriptPath is not null
subtreescope

 

Active Directory Users without Logon script

All Users without Logon Script report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,scriptPath from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and scriptPath is null
subtreescope

 

Active Directory Users with Managers

All Users with Managers report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,manager from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and manager is not null
subtreescope

 

Active Directory Users without Managers

All Users without Managers report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,manager from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and manager is null
subtreescope

 

Active Directory Recently Deleted Users

All Recently Deleted Users report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass='user' and isDeleted=TRUE subtreescope

 

Active Directory Users with Password Never Expires

All Users with Password Never Expires report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and userAccountControl:1.2.840.113556.1.4.803:=65536 subtreescope

 

Active Directory Users with Password Always Expire

All Users with Password Always Expire report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and userAccountControl:1.2.840.113556.1.4.803:!=65536 subtreescope

 

Active Directory Users with Encrypted Password Allowed

All Users with Encrypted Password report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and userAccountControl:1.2.840.113556.1.4.803:=128
subtreescope

 

Active Directory Users with Password Changed in Last 30 Days

All Users with Password Changed in Last 60 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,pwdLastSet from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and pwdLastSet!=0 and pwdLastSet>= CurrentTimestamp -30 days subtreescope

 

Active Directory Users with Password Not Changed in Last 60 Days

All Users with Password Changed in Last 60 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,pwdLastSet from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and pwdLastSet!=0 and pwdLastSet>= CurrentTimestamp -60 days subtreescope

 

Active Directory Users with Password Changed Between

All Users with password not changed between the dates specified report is created using the following sqlldap statement, you can specify from and to timestamp in the popup dialog.

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,pwdLastSet from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and pwdLastSet!=0 and pwdLastSet>=$Timestamp1 and pwdLastSet<=$Timestamp2 subtreescope

 

Active Directory Users with Password Not Changed in Last 30 Days

All Users with Password not Changed in Last 30 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,pwdLastSet from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and pwdLastSet!=0 and pwdLastSet<= CurrentTimestamp -30 days subtreescope

 

Active Directory All Users Password must change at next logon

All Users with password must change at next logon report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,pwdLastSet from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and pwdLastSet=0
subtreescope

 

Active Directory All Users who entered bad password in last 7 days

All Users who entered bad password in last 7 days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,badPasswordTime from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and badPasswordTime>= CurrentTimestamp -7 days subtreescope

 

Active Directory All Users who entered bad password in last 30 days

All Users who entered bad password in last 30 days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,badPasswordTime from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and badPasswordTime>= CurrentTimestamp -30 days subtreescope

 

Active Directory All Users who entered bad password between..

All Users who entered bad password between the dates specified report is created using the following sqlldap statement, you can specify from and to timestamp in the popup dialog.

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,badPasswordTime from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and badPasswordTime>=$Timestamp1 and badPasswordTime<=$Timestamp2 subtreescope

 

Active Directory All Users Created in Last 30 Days Report

All Users Created in Last 30 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and createTimestamp >= CurrentTimestamp -30 days
subtreescope

 

Active Directory All Users Created in Last 60 Days Report

All Users Created in Last 60 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and createTimestamp >= CurrentTimestamp -60 days
subtreescope

 

Active Directory All Users Created in Last 90 Days Report

All Users Created in Last 90 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and createTimestamp >= CurrentTimestamp -90 days
subtreescope

 

Active Directory All Users Created between.. Report

All Users Created between the dates specified report is created using the following sqlldap statement, you can specify from and to timestamp in the popup dialog.

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and createTimestamp >=$Timestamp1 and createTimestamp <= $Timestamp2 subtreescope

 

Active Directory All Users Modified Today Report

All Users Modified Today report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope

 

Active Directory All Users Modified Yesterday Report

All Users Modified Yesterday report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope

 

Active Directory All Users Modified in Last 7 Days Report

All Users Modified in Last 7 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp >= CurrentTimestamp -7 days
subtreescope

 

Active Directory All Users Modified in Last 30 Days Report

All Users Modified in Last 30 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp >= CurrentTimestamp -30 days
subtreescope

 

Active Directory All Users Modified in Last 60 Days Report

All Users Modified in Last 60 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp >= CurrentTimestamp -60 days
subtreescope

 

Active Directory All Users Modified in Last 90 Days Report

All Users Modified in Last 90 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp >= CurrentTimestamp -90 days
subtreescope

 

Active Directory All Users Modified between.. Report

All Users Modified between the dates specified report is created using the following sqlldap statement, you can specify from and to timestamp in the popup dialog.

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp >=$Timestamp1 and modifyTimestamp <= $Timestamp2 subtreescope

 

Active Directory All Users Specified Attribute is null or not present

All Users where specified attribute is null report report is created using the following sqlldap statement, you can specifiy the attribute in the popup dialog.

Select mail, cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and $Attribute is null subtreescope

 

Active Directory All Users Specified Attribute is not null or present

All Users where specified attribute is not null report is created using the following sqlldap statement, you can specifiy the attribute in the popup dialog.

Select mail, cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and $Attribute is not null subtreescope

 

Active Directory All Account Expired Users Report

All account expired users report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,accountExpires from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and accountExpires!=0 and accountExpires!=9223372036854775807 and accountExpires<= CurrentTimestamp subtreescope

 

Active Directory All Account Never Expire Users Report

All user accounts which will never expire report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,accountExpires from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and accountExpires!=0 and accountExpires!=9223372036854775807 and accountExpires<= CurrentTimestamp subtreescope

 

Active Directory All Users Account Expired in the Last 7 days Report

All user accounts expired in the last 7 days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,accountExpires from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and accountExpires!=0 and accountExpires!=9223372036854775807 and accountExpires>= CurrentTimestamp -7 days and accountExpires<= CurrentTimestamp
subtreescope

 

Active Directory All Users Account which will expire in the next 30 days Report

All user accounts will expire in the next 30 days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,accountExpires from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and accountExpires!=0 and accountExpires!=9223372036854775807 and accountExpires<= CurrentTimestamp + 30 days and accountExpires>= CurrentTimestamp
subtreescope

 

Active Directory All Users Account which expired/expire between..

All users account which are expired/expire between the dates specified report is created using the following sqlldap statement, you can specify from and to timestamp in the popup dialog.

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,accountExpires from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and accountExpires!=0 and accountExpires!=9223372036854775807 and accountExpires>=$Timestamp1 and accountExpires<=$Timestamp2 subtreescope

 

Active Directory All Users Account Lockedout between..

All Locked out user accounts between the dates specified report is created using the following sqlldap statement, you can specify from and to timestamp in the popup dialog.

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,lockoutTime from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lockoutTime>=1 and lockoutTime>=$Timestamp1 and lockoutTime<=$Timestamp2 subtreescope

 

Active Directory All Users with Dial-in Access allowed Report

All account with dial-in access allowed report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,msNPCallingStationID from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and msNPCallingStationID=TRUE
subtreescope

 

Active Directory All Users with Dial-in Access Denied Report

All account with dial-in access denied report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,msNPCallingStationID from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and msNPCallingStationID=FALSE
subtreescope

 

Active Directory All Users who never logged on

All user who never logged on report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,msNPCallingStationID from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and msNPCallingStationID=FALSE
subtreescope

 

Active Directory All Users who logged on Today

All user who logged on Today report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,lastLogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lastlogon <= CurrentEndofDay and lastlogon >=CurrentStartofDay subtreescope

 

Active Directory All Users who logged on Yesterday

All user who logged on Yesterday report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,lastLogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lastlogon <= CurrentEndofDay -1 days and lastlogon >=CurrentStartofDay -1 days subtreescope

 

Active Directory All Users who logged in last 7 days

All user who logged in last 7 days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,lastLogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lastlogon <= CurrentEndofDay -1 days and lastlogon >=CurrentStartofDay -7 days subtreescope

 

Active Directory All Users who logged in last 30 days

All user who logged in last 30 days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,lastLogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lastlogon <= CurrentEndofDay -1 days and lastlogon >=CurrentStartofDay -7 days subtreescope

 

Active Directory All Users who logged in between..

All user who logged in between the dates specified report is created using the following sqlldap statement, you can specify from and to timestamp in the popup dialog.

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,lastLogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lastlogon <= CurrentEndofDay -1 days and lastlogon >=CurrentStartofDay -7 days subtreescope


AD Admin & Reporting Tool or LDAP plus AD Help Desk Tool give Active Directory administrators and developers a quick view of all available groups, below you can find detailed information on how these reports are created.

Active Directory All Groups Report

All Groups report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=group subtreescope

 

Active Directory All Groups with Member Report

All Groups with Member report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,member from RootDSE where objectClass=group and member is not null subtreescope

 

Active Directory All Groups without Member Report

All Groups without Member report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=group and member is null subtreescope

 

Active Directory All Managed Groups Report

All Managed Groups report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,managedBy from RootDSE where objectClass=group and managedby is not null subtreescope

 

Active Directory All Un Managed Groups Report

All Un Managed Groups report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,managedBy from RootDSE where objectClass=group and managedby is null subtreescope

 

Active Directory All Security Groups Report

All Security Groups report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,groupType from RootDSE where objectClass=group and groupType:1.2.840.113556.1.4.804:=2147483648 subtreescope

 

Active Directory All Distribution Groups Report

All Distribution Groups report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,groupType from RootDSE where objectClass=group and (groupType:1.2.840.113556.1.4.804:!=2147483648 or sAMAccountType=268435457)
subtreescope

 

Active Directory All Universal Groups Report

All Distribution Groups report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,groupType from RootDSE where groupType:1.2.840.113556.1.4.803:=8 subtreescope

 

Active Directory All Mail Enabled Groups Report

All Main Enabled Groups report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, mail,groupType from RootDSE where objectClass=group and mail is not null and sAMAccountType!=268435457 subtreescope

 

Active Directory Recently Deleted Groups Report

All Recently deleted Groups report is created using the following sqlldap statement (All Deleted reports always run against the rootDSE)

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=group and isDeleted=TRUE subtreescope

 

Active Directory All Groups Created Today Report

All Groups Created Today report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=group and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope

 

Active Directory All Groups Created Yesterday Report

All Groups Created Yesterday report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=group and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope

 

Active Directory All Groups Created in Last 7 Days Report

All Groups Created in Last 7 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=group and createTimestamp >= CurrentTimestamp -7 days subtreescope

 

Active Directory All Groups Created in Last 30 Days Report

All Groups Created in Last 30 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=group and createTimestamp >= CurrentTimestamp -30 days subtreescope

 

Active Directory All Groups Created in Last 60 Days Report

All Groups Created in Last 60 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=group and createTimestamp >= CurrentTimestamp -60 days subtreescope

 

Active Directory All Groups Created in Last 90 Days Report

All Groups Created in Last 90 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=group and createTimestamp >= CurrentTimestamp -90 days subtreescope

 

Active Directory All Groups Created between.. Report

All Groups Created between the dates specified report is created using the following sqlldap statement, you can specify from and to timestamp in the popup dialog.

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=group and createTimestamp >=$Timestamp1 and createTimestamp <=$Timestamp2 subtreescope

 

Active Directory All Groups Modified Today Report

All Groups Modified Today report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=group and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope

 

Active Directory All Groups Modified Yesterday Report

All Groups Modified Yesterday report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=group and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope

 

Active Directory All Groups Modified in Last 7 Days Report

All Groups Modified in Last 7 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=group and modifyTimestamp >= CurrentTimestamp -7 days subtreescope

 

Active Directory All Groups Modified in Last 30 Days Report

All Groups Modified in Last 30 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=group and modifyTimestamp >= CurrentTimestamp -30 days subtreescope

 

Active Directory All Groups Modified in Last 60 Days Report

All Groups Modified in Last 60 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimestamp,modifiersName,modifyTimestamp from RootDSE where objectClass=groupOfUniqueNames and modifyTimestamp >= CurrentTimestamp -60 days subtreescope

 

Active Directory All Groups Modified in Last 90 Days Report

All Groups Modified in Last 90 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=group and modifyTimestamp >= CurrentTimestamp -90 days subtreescope

 

Active Directory All Groups Modified between.. Report

All Groups Modified between the dates specified report is created using the following sqlldap statement, you can specify from and to timestamp in the popup dialog.

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=group and modifyTimestamp >= $Timestamp1 and modifyTimestamp <=$Timestamp2 subtreescope

 

Active Directory All Groups Specified Attribute is null or not present

All Groups where specified attribute is null report is created using the following sqlldap statement, you can specifiy the attribute in the popup dialog.

Select mail, cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=group and $Attribute is null subtreescope

 

Active Directory All Groups Specified Attribute is not null or present

All Groups where specified attribute is not null report is created using the following sqlldap statement, you can specifiy the attribute in the popup dialog.

Select mail, cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=group and mail is not null subtreescope

 


AD Admin & Reporting Tool or LDAP plus AD Help Desk Tool provides detailed information on contacts, below you can find information on how these reports are created.

Active Directory All Contacts Report

All Contact report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=contact subtreescope

 

Active Directory All Mail Enabled Contacts Report

All Mail enabled contact report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,mailNickname from RootDSE where objectClass=contact and objectClass=person and mailnickname is not null and targetAddress is not null subtreescope

 

Active Directory Recently Deleted Contacts Report

All Recently deleted Contacts report is created using the following sqlldap statement (All Deleted reports always run against the rootDSE)

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass='contact' and isDeleted=TRUE subtreescope

 

Active Directory All Contacts Created Today Report

All Contacts Created Today report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=contact and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope

 

Active Directory All Contacts Created Yesterday Report

All Contacts Created Yesterday report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=contact and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope

 

Active Directory All Contacts Created in Last 7 Days Report

All Contacts Created in Last 7 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=contact and createTimestamp >= CurrentTimestamp -7 days subtreescope

 

Active Directory All Contacts Created in Last 30 Days Report

All Contacts Created in Last 30 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=contact and createTimestamp >= CurrentTimestamp -30 days subtreescope

 

Active Directory All Contacts Created in Last 60 Days Report

All Contacts Created in Last 60 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=contact and createTimestamp >= CurrentTimestamp -60 days subtreescope

 

Active Directory All Contacts Created in Last 90 Days Report

All Contacts Created in Last 90 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=contact and createTimestamp >= CurrentTimestamp -90 days subtreescope

 

Active Directory All Contacts Created between.. Report

All Contacts Created between the dates specified report is created using the following sqlldap statement, you can specify from and to timestamp in the popup dialog.

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=contact and createTimestamp >=$Timestamp1 and createTimestamp <=$Timestamp2 subtreescope

 

Active Directory All Contacts Modified Today Report

All Contacts Modified Today report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=contact and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope

 

Active Directory All Contacts Modified Yesterday Report

All Contacts Modified Yesterday report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=contact and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope

 

Active Directory All Contacts Modified in Last 7 Days Report

All Contacts Modified in Last 7 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=group and modifyTimestamp >= CurrentTimestamp -7 days subtreescope

 

Active Directory All Contacts Modified in Last 30 Days Report

All Contacts Modified in Last 30 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=contact and modifyTimestamp >= CurrentTimestamp -30 days subtreescope

 

Active Directory All Contacts Modified in Last 60 Days Report

All Contacts Modified in Last 60 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimestamp,modifiersName,modifyTimestamp from RootDSE where objectClass=groupOfUniqueNames and modifyTimestamp >= CurrentTimestamp -60 days subtreescope

 

Active Directory All Contacts Modified in Last 90 Days Report

All Contacts Modified in Last 90 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=contact and modifyTimestamp >= CurrentTimestamp -90 days subtreescope

 

Active Directory All Contacts Modified between.. Report

All Contacts Modified between the dates specified report is created using the following sqlldap statement, you can specify from and to timestamp in the popup dialog.

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=contact and modifyTimestamp >= $Timestamp1 and modifyTimestamp <=$Timestamp2 subtreescope

 

Active Directory All Contacts Specified Attribute is null or not present

All Contacts where specified attribute is null report is created using the following sqlldap statement, you can specifiy the attribute in the popup dialog.

Select mail, cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=contact and $Attribute is null subtreescope

 

Active Directory All Contacts Specified Attribute is not null or present

All Contacts where specified attribute is not null report is created using the following sqlldap statement, you can specifiy the attribute in the popup dialog.

Select mail, cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=contact and $Atribute is not null subtreescope

 


AD Admin & Reporting Tool or LDAP plus AD Help Desk Tool has a comprehensive list of Active Directory Computer reports, below you can find information on how these reports are created.

Active Directory All Computers Report

All Computers report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=computer subtreescope

 

Active Directory All Disabled Computers Report

All Disabled Computers report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=computer and userAccountControl:1.2.840.113556.1.4.803:=2 subtreescope

 

Active Directory All Enabled Computers Report

All Disabled Computers report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=computer and userAccountControl:1.2.840.113556.1.4.803:!=2 subtreescope

 

Active Directory All Managed Computers Report

All Managed Computers report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, managedBy from RootDSE where objectClass=computer and managedby is not null subtreescope

 

Active Directory All UnManaged Computers Report

All UnManaged Computers report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, managedBy from RootDSE where objectClass=computer and managedby is null subtreescope

 

Active Directory All Recently Deleted Computers Report

All Recently deleted Computers report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName, userAccountControl from RootDSE where objectClass='computer' and isDeleted=TRUE subtreescope

 

Active Directory All Computers With Windows Vista Operating System Report

All Computers with Windows Vista Operating System report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, operatingSystem, operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Vista% subtreescope

 

Active Directory All Computers With Windows XP all Service Packs Report

All Computers with Windows XP Operating System all Service Packs report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows XP% subtreescope

 

Active Directory All Computers With Windows XP Service Pack 1 Report

All Computers with Windows XP Operating System Service Packs 1 report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, operatingSystem, operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows XP% and operatingSystemServicePack=Service Pack 1 subtreescope

 

Active Directory All Computers With Windows XP Service Pack 2 Report

All Computers with Windows XP Operating System Service Packs 2 report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, operatingSystem, operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows XP% and operatingSystemServicePack=Service Pack 2 subtreescope

 

Active Directory All Computers With Windows XP Service Pack 3 Report

All Computers with Windows XP Operating System Service Packs 3 report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, operatingSystem, operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows XP% and operatingSystemServicePack=Service Pack 3 subtreescope

 

Active Directory All Computers With Windows Server 2003 Report

All Computers with Windows Server 2003 Operating System all Service Packs report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, operatingSystem, operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Server 2003% subtreescope

 

Active Directory All Computers With Windows Server 2003 Service Pack1 Report

All Computers with Windows Server 2003 Operating System Service Pack 1 report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, operatingSystem, operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Server 2003% and operatingSystemServicePack=Service Pack 1 subtreescope

 

Active Directory All Computers With Windows Server 2003 Service Pack2 Report

All Computers with Windows Server 2003 Operating System Service Pack 2 report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, operatingSystem, operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Server 2003% and operatingSystemServicePack=Service Pack 2 subtreescope

 

Active Directory All Computers With Windows Server 2003 Service Pack3 Report

All Computers with Windows Server 2003 Operating System Service Pack 3 report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, operatingSystem, operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Server 2003% and operatingSystemServicePack=Service Pack 3 subtreescope

 

Active Directory All Computers With Windows Server 2000 Operating System Report

All Computers with Windows Server 2000 Operating System all Service Packs report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, operatingSystem, operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Server 2000% subtreescope

 

Active Directory All Computers With Windows Server 2000 Service Pack1 Report

All Computers with Windows Server 2000 Operating System Service Pack 1 report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,operatingSystem, operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Server 2000% and operatingSystemServicePack=Service Pack 1 subtreescope

 

Active Directory All Computers With Windows Server 2000 Service Pack2 Report

All Computers with Windows Server 2000 Operating System Service Pack 2 report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,operatingSystem, operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Server 2000% and operatingSystemServicePack=Service Pack 2 subtreescope

 

Active Directory All Computers With Windows Server 2000 Service Pack3 Report

All Computers with Windows Server 2000 Operating System Service Pack 3 report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,operatingSystem, operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Server 2000% and operatingSystemServicePack=Service Pack 3 subtreescope

Active Directory All Computers With Windows Server 2000 Service Pack4 Report

All Computers with Windows Server 2000 Operating System Service Pack 4 report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,operatingSystem, operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Server 2000% and operatingSystemServicePack=Service Pack 4 subtreescope

Active Directory All Computers With Windows 2000 Operating System Report

All Computers with Windows 2000 Operating System all Service Packs report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,operatingSystem, operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Window 2000% subtreescope

Active Directory All Computers With Windows 2000 Service Pack1 Report

All Computers with Windows 2000 Operating System Service Pack 1 report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,operatingSystem, operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Window 2000% and operatingSystemServicePack=Service Pack 1 subtreescope

 

Active Directory All Computers With Windows 2000 Service Pack2 Report

All Computers with Windows 2000 Operating System Service Pack 2 report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,operatingSystem, operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Window 2000% and operatingSystemServicePack=Service Pack 2 subtreescope

 

Active Directory All Computers With Windows Server 2000 Service Pack3 Report

All Computers with Windows 2000 Operating System Service Pack 3 report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,operatingSystem, operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Window 2000% and operatingSystemServicePack=Service Pack 3 subtreescope

Active Directory All Computers With Windows Server 2000 Service Pack4 Report

All Computers with Windows 2000 Operating System Service Pack 4 report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,operatingSystem, operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Window 2000% and operatingSystemServicePack=Service Pack 4 subtreescope

 

Active Directory All Non-Windows Operating System Report

All Computers Created in Last 7 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=computer and operatingSystem !=Win* subtreescope

 

Active Directory All Computers Created Today Report

All Computers Created Today report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=computer and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope

Active Directory All Computers Created Yesterday Report

All Computers Created Yesterday report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=computer and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope

 

Active Directory All Computers Created in Last 7 Days Report

All Computers Created in Last 7 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=computer and createTimestamp >= CurrentTimestamp -7 days subtreescope

 

Active Directory All Computers Created in Last 30 Days Report

All Computers Created in Last 30 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=computer and createTimestamp >= CurrentTimestamp -30 days subtreescope

 

Active Directory All Computers Created in Last 60 Days Report

All Computers Created in Last 60 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=computer and createTimestamp >= CurrentTimestamp -60 days subtreescope

 

Active Directory All Computers Created in Last 90 Days Report

All Computers Created in Last 90 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=contact and createTimestamp >= CurrentTimestamp -90 days subtreescope

 

Active Directory All Computers Created between.. Report

All Computers Created between the dates specified report is created using the following sqlldap statement, you can specify from and to timestamp in the popup dialog.

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=computer and createTimestamp >= $Timestamp1 and createTimestamp <=$Timestamp2 subtreescope

 

Active Directory All Computers Modified Today Report

All Computers Modified Today report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=computer and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope

 

Active Directory All Computers Modified Yesterday Report

All Computers Modified Yesterday report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=computer and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days
subtreescope

 

Active Directory All Computers Modified in Last 7 Days Report

All Computers Modified in Last 7 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=computer and modifyTimestamp >= CurrentTimestamp -7 days subtreescope

 

Active Directory All Computers Modified in Last 30 Days Report

All Computers Modified in Last 30 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=computer and modifyTimestamp >= CurrentTimestamp -30 days subtreescope

 

Active Directory All Computers Modified in Last 60 Days Report

All Computers Modified in Last 60 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=computer and modifyTimestamp >= CurrentTimestamp -60 days subtreescope

 

Active Directory All Computers Modified in Last 90 Days Report

All Computers Modified in Last 90 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=computer and modifyTimestamp >= CurrentTimestamp -90 days subtreescope

 

Active Directory All Computers Modified between.. Report

All Computers Modified between the dates specified report is created using the following sqlldap statement, you can specify from and to timestamp in the popup dialog.

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=computer and modifyTimestamp >=$Timestamp1 and modifyTimestamp <=$Timestamp2 subtreescope

 

Active Directory All Computers Specified Attribute is null or not present

All Computers where specified attribute is null report is created using the following sqlldap statement, you can specifiy the attribute in the popup dialog.

Select mail, cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=computer and $Attribute1 is null subtreescope

 

Active Directory All Computers Specified Attribute is not null or present

All Computers where specified attribute is not null report is created using the following sqlldap statement, you can specifiy the attribute in the popup dialog.

Select mail, cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=computer and $Attribute2 is not null subtreescope

 


AD Admin & Reporting Tool or LDAP plus AD Help Desk Tool has a comprehensive list of Active Directory Printer reports, below you can find information on how these reports are created.

Active Directory All Printers Report

All Printers report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=printqueue subtreescope

 

Active Directory All Disabled Printers Report

All Disabled Printers report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=printqueue and userAccountControl:1.2.840.113556.1.4.803:=2 subtreescope

 

Active Directory All Enabled Printers Report

All Enabled Printers report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=printqueue and userAccountControl:1.2.840.113556.1.4.803:!=2 subtreescope

 

Active Directory All Managed Printers Report

All Managed Printers report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,managedBy from RootDSE where objectClass=printqueue and managedby is not null subtreescope

 

Active Directory All UnManaged Printers Report

All UnManaged Printers report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,managedBy from RootDSE where objectClass=printqueue and managedby is null subtreescope

 

Active Directory All Recently Deleted Printers Report

All Recently deleted Printers report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=printqueue and isDeleted=true subtreescope

 

Active Directory All Printers Created Today Report

All Printers Created Today report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=printqueue and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope

Active Directory All Printers Created Yesterday Report

All Printers Created Yesterday report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=printqueue and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days
subtreescope

 

Active Directory All Printers Created in Last 7 Days Report

All Printers Created in Last 7 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=printqueue and createTimestamp >= CurrentTimestamp -7 days subtreescope

 

Active Directory All Printers Created in Last 30 Days Report

All Printers Created in Last 30 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=printqueue and createTimestamp >= CurrentTimestamp -30 days subtreescope

 

Active Directory All Printers Created in Last 60 Days Report

All Printers Created in Last 60 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=printqueue and createTimestamp >= CurrentTimestamp -60 days subtreescope

 

Active Directory All Printers Created in Last 90 Days Report

All Printers Created in Last 90 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=printqueue and createTimestamp >= CurrentTimestamp -90 days subtreescope

 

Active Directory All Printers Created between.. Report

All Printers Created between the dates specified report is created using the following sqlldap statement, you can specify from and to timestamp in the popup dialog.

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=printqueue and createTimestamp >= $Timestamp1 and createTimestamp <= $Timestamp1 subtreescope

 

Active Directory All Printers Modified Today Report

All Printers Modified Today report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=printqueue and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope

 

Active Directory All Printers Modified Yesterday Report

All Printers Modified Yesterday report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=printqueue and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days
subtreescope

 

Active Directory All Printers Modified in Last 7 Days Report

All Printers Modified in Last 7 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=printqueue and modifyTimestamp >= CurrentTimestamp -7 days subtreescope

 

Active Directory All Printers Modified in Last 30 Days Report

All Printers Modified in Last 30 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=printqueue and modifyTimestamp >= CurrentTimestamp -30 days subtreescope

 

Active Directory All Printers Modified in Last 60 Days Report

All Printers Modified in Last 60 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=printqueue and modifyTimestamp >= CurrentTimestamp -60 days subtreescope

 

Active Directory All Printers Modified in Last 90 Days Report

All Printers Modified in Last 90 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=printqueue and modifyTimestamp >= CurrentTimestamp -90 days subtreescope

 

Active Directory All Printers Modified between.. Report

All Printers Modified between the dates specified report is created using the following sqlldap statement, you can specify from and to timestamp in the popup dialog.

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=printqueue and modifyTimestamp >=$Timestamp1 and modifyTimestamp <=$Timestamp2 subtreescope

 

Active Directory All Printers Specified Attribute is null or not present

All Printers where specified attribute is null report is created using the following sqlldap statement, you can specifiy the attribute in the popup dialog.

Select mail, cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=printqueue and $Attribute is null subtreescope

 

Active Directory All Printers Specified Attribute is not null or present

All Printers where specified attribute is not null report is created using the following sqlldap statement, you can specifiy the attribute in the popup dialog.

Select mail, cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=printqueue and $Attribute is not null subtreescope

 


AD Admin & Reporting Tool or LDAP plus AD Help Desk Tool provides administrators and developers a quick view of the users and groups with email proxy enabled, users with webmail access et. Below you can find information on how these reports are created.

Active Directory Mailbox Enabled Users Report

All Mailbox Enabled Users report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, mailNickname from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null subtreescope

 

Active Directory All Mail Enabled Users Report

All Mail Enabled Users report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, mailNickname from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and targetAddress is not null subtreescope

 

Active Directory All Enabled Exchanges Report

All Enabled Exchanges report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=printqueue and userAccountControl:1.2.840.113556.1.4.803:!=2 subtreescope

 

Active Directory All Users with Email Proxy Enabled Report

All Users with Email Proxy Enabled report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, mailNickname from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and proxyAddresses is not null subtreescope

 

Active Directory All Users with Email Proxy Disabled Report

All Users with Email Proxy Disabled report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, mailNickname from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and proxyAddresses is null subtreescope

 

Active Directory All Users with Default Sending Size

All Users with Default Sending Size report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, mailNickname, msExchHomeServerName,submissionContLength from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and submissionContLength is null
subtreescope

 

Active Directory All Users with Restricted Sending Size

All Users with Restricted Sending size report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, mailNickname, msExchHomeServerName,submissionContLength from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and submissionContLength is not null
subtreescope

 

Active Directory All Users with Default Recipient Size

All Users with Default Recipient size report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, mailNickname, msExchHomeServerName, msExchRecipLimit from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and msExchRecipLimit is null subtreescope

 

Active Directory All Users with Restricted Recipient Size

All Users with Restricted Recipient size report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, mailNickname ,msExchHomeServerName, msExchRecipLimit from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and msExchRecipLimit is not null subtreescope

Active Directory All Users with Default Receiving Size

All Users with Default Receiving size report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, mailNickname, msExchHomeServerName,delivContLength from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and delivContLength is null subtreescope

Active Directory All Users with Restricted Receiving Size

All Users with Restricted Receiving size report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, mailNickname, msExchHomeServerName,delivContLength from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and delivContLength is not null
subtreescope

Active Directory All Users with Accept Messages from Everyone

All Users with accept messages from everyone report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName, userAccountControl, mailNickname,homeMDB, msExchHomeServerName,targetAddress,unauthOrig from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and (homeMDB is not null or msExchHomeServerName is not null or targetAddress is not null) and authOrig is null and unauthOrig is null subtreescope

 

Active Directory All Users with Accept Messages Restricted

All Users with restriction on accepting messages report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,mailNickname, homeMDB,msExchHomeServerName,targetAddress,unauthOrig from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and (homeMDB is not null or msExchHomeServerName is not null or targetAddress is not null) and (authOrig is not null or unauthOrig is not null) subtreescope

 

Active Directory All Users with Default Storage Limit

All Users with default storage limit report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,mailNickname, msExchHomeServerName,mDBUseDefaults from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and mDBUseDefaults=TRUE
subtreescope

 

Active Directory All Users with Mailbox size limit

All Users with mailbox size limit report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,mailNickname, msExchHomeServerName,mDBUseDefaults from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and mDBUseDefaults=FALSE subtreescope

 

Active Directory Users hidden from Exchange Address List

All Users hidden from exchange address list report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, msExchHidefromAddressLists from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and msExchHideFromAddressLists=TRUE subtreescope

 

Active Directory Users unhidden from Exchange Address List

All Exchanges Created in Last 30 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, msExchHidefromAddressLists, msExchHideFromAddressLists from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and (msExchHideFromAddressLists=FALSE or msExchHideFromAddressLists is null) subtreescopepe

 

Active Directory Users whose mail is forwarded to another address

All users whose email is forwarded to another address report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,altRecipient from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and altRecipient is not null
subtreescope

 

Active Directory All Outlook web access enabled users

All Outlook web access enabled users report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, msExchHomeServerName,protocolSettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*HTTP§1§1* or protocolsettings!=*OWA§0*) subtreescope

 

Active Directory All Outlook web access disabled users

All Outlook web access disabled users report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, msExchHomeServerName,protocolSettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*HTTP§0§1* or protocolsettings=*OWA§0*) subtreescope

 

Active Directory All POP3 enabled users

All POP3 enabled users report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, msExchHomeServerName,protocolSettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*POP3§1*) subtreescope

 

Active Directory All POP3 disabled users

All POP3 disabled users report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, msExchHomeServerName,protocolSettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*POP3§0*) subtreescope

 

Active Directory All IMAP4 enabled users

All POP3 enabled users report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, msExchHomeServerName,protocolSettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*IMAP4§1*)
subtreescope

 

Active Directory All IMAP4 disabled users

All POP3 disabled users report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl, msExchHomeServerName,protocolSettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*IMAP4§0*)
subtreescope


AD Admin & Reporting Tool or LDAP plus AD Help Desk Tool has a comprehensive list of Active Directory GPO reports, below you can find information on how these reports are created.

Active Directory All GPOs Report

All GPOs report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=groupPolicyContainer subtreescope

 

Active Directory All Recently Deleted GPOs Report

All Recently deleted GPOs report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=groupPolicyContainer and isDeleted=TRUE subtreescope

 

Active Directory All Disabled GPOs Report

All Disabled GPOs report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,flags from RootDSE where objectClass=groupPolicyContainer and flags=3 subtreescope

 

Active Directory All User Settings Disabled GPOs Report

All User Settings Disabled GPOs report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl,flags from RootDSE where objectClass=groupPolicyContainer and (flags=3 or flags=1) subtreescope

 

Active Directory All Enabled GPOs Report

All Enabled GPOs report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=printqueue and userAccountControl:1.2.840.113556.1.4.803:!=2 subtreescope

 

Active Directory All GPOs Created Today Report

All GPOs Created Today report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=groupPolicyContainer and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay
subtreescope

Active Directory All GPOs Created Yesterday Report

All GPOs Created Yesterday report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=groupPolicyContainer and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days
subtreescope

 

Active Directory All GPOs Created in Last 7 Days Report

All GPOs Created in Last 7 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=groupPolicyContainer and createTimestamp >= CurrentTimestamp -7 days subtreescope

 

Active Directory All GPOs Created in Last 30 Days Report

All GPOs Created in Last 30 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=groupPolicyContainer and createTimestamp >= CurrentTimestamp -30 days subtreescope

 

Active Directory All GPOs Created in Last 60 Days Report

All GPOs Created in Last 60 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=groupPolicyContainer and createTimestamp >= CurrentTimestamp -90 days subtreescope

 

Active Directory All GPOs Created in Last 90 Days Report

All GPOs Created in Last 90 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=groupPolicyContainer and createTimestamp >= CurrentTimestamp -90 days subtreescope

 

Active Directory All GPOs Created between.. Report

All GPOs Created between the dates specified report is created using the following sqlldap statement, you can specify from and to timestamp in the popup dialog.

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=groupPolicyContainer and createTimestamp >=$Timestamp1 and createTimestamp <=$Timestamp2 subtreescope

 

Active Directory All GPOs Modified Today Report

All GPOs Modified Today report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay
subtreescope

 

Active Directory All GPOs Modified Yesterday Report

All GPOs Modified Yesterday report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days
subtreescope

 

Active Directory All GPOs Modified in Last 7 Days Report

All GPOs Modified in Last 7 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp >= CurrentTimestamp -7 days subtreescope

 

Active Directory All GPOs Modified in Last 30 Days Report

All GPOs Modified in Last 30 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp >= CurrentTimestamp -30 days subtreescope

 

Active Directory All GPOs Modified in Last 60 Days Report

All GPOs Modified in Last 60 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp >= CurrentTimestamp -60 days subtreescope

 

Active Directory All GPOs Modified in Last 90 Days Report

All GPOs Modified in Last 90 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp >= CurrentTimestamp -90 days subtreescope

 

Active Directory All GPOs Modified between.. Report

All GPOs Modified between the dates specified report is created using the following sqlldap statement, you can specify from and to timestamp in the popup dialog.

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp >=$Timestamp1 and modifyTimestamp <=$Timestamp2 subtreescope

 

Active Directory All GPOs Specified Attribute is null or not present

All GPOs where specified attribute is null report is created using the following sqlldap statement, you can specifiy the attribute in the popup dialog.

Select mail, cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=groupPolicyContainer and $Attribute is null subtreescope

 

Active Directory All GPOs Specified Attribute is not null or present

All GPOs where specified attribute is not null report is created using the following sqlldap statement, you can specifiy the attribute in the popup dialog.

Select mail, cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=groupPolicyContainer and $Attribute is not null subtreescope

 


AD Admin & Reporting Tool or LDAP plus AD Help Desk Tool Organizational unit reports provide adminsitrators and developers a quick insight into OUs, when they were created or modified. OU reports can be easily customized to suit the organization needs. Below you can find information on how these reports are created.

Active Directory All OUs Report

All OUs report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=organizationalUnit subtreescope

 

Active Directory All OUs Created Today Report

All OUs Created Today report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=organizationalUnit and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay
subtreescope

Active Directory All OUs Created Yesterday Report

All OUs Created Yesterday report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=organizationalUnit and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days
subtreescope

 

Active Directory All OUs Created in Last 7 Days Report

All OUs Created in Last 7 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=organizationalUnit and createTimestamp >= CurrentTimestamp -7 days subtreescope

 

Active Directory All OUs Created in Last 30 Days Report

All OUs Created in Last 30 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=organizationalUnit and createTimestamp >= CurrentTimestamp -30 days subtreescope

 

Active Directory All OUs Created in Last 60 Days Report

All OUs Created in Last 60 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=organizationalUnit and createTimestamp >= CurrentTimestamp -60 days subtreescope

 

Active Directory All OUs Created in Last 90 Days Report

All OUs Created in Last 90 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=organizationalUnit and createTimestamp >= CurrentTimestamp -90 days subtreescope

 

Active Directory All OUs Created between.. Report

All OUs Created between the dates specified report is created using the following sqlldap statement, you can specify from and to timestamp in the popup dialog.

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=organizationalUnit and createTimestamp >= $Timestamp1 and createTimestamp <= $Timestamp1 subtreescope

 

Active Directory All OUs Modified Today Report

All OUs Modified Today report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=organizationalUnit and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope

 

Active Directory All OUs Modified Yesterday Report

All OUs Modified Yesterday report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=organizationalUnit and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days
subtreescope

 

Active Directory All OUs Modified in Last 7 Days Report

All OUs Modified in Last 7 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=organizationalUnit and modifyTimestamp >= CurrentTimestamp -7 days subtreescope

 

Active Directory All OUs Modified in Last 30 Days Report

All OUs Modified in Last 30 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=organizationalUnit and modifyTimestamp >= CurrentTimestamp -30 days subtreescope

 

Active Directory All OUs Modified in Last 60 Days Report

All OUs Modified in Last 60 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=organizationalUnit and modifyTimestamp >= CurrentTimestamp -60 days subtreescope

 

Active Directory All OUs Modified in Last 90 Days Report

All OUs Modified in Last 90 Days report is created using the following sqlldap statement

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=organizationalUnit and modifyTimestamp >= CurrentTimestamp -90 days subtreescope

 

Active Directory All OUs Modified between.. Report

All OUs Modified between the dates specified report is created using the following sqlldap statement, you can specify from and to timestamp in the popup dialog.

Select cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=organizationalUnit and modifyTimestamp >=$Timestamp1 and modifyTimestamp <=$Timestamp2 subtreescope

 

Active Directory All OUs Specified Attribute is null or not present

All OUs where specified attribute is null report is created using the following sqlldap statement, you can specifiy the attribute in the popup dialog.

Select mail, cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=organizationalUnit and $Attribute is null subtreescope

 

Active Directory All OUs Specified Attribute is not null or present

All Printers where specified attribute is not null report is created using the following sqlldap statement, you can specifiy the attribute in the popup dialog.

Select mail, cn,creatorsName,createTimeStamp,modifiersName,modifyTimeStamp,sAMAccountName,userAccountControl from RootDSE where objectClass=organizationalUnit and $Attribute is not null subtreescope

 

 

 

 


Ldapsoft Home page AD Admin & Reporting Tool Home Page