Audit Exports

Audit exports are simple and easy to use process to generate reports from Active Directory in PDF or Excel Format.

 

To generate reports, please select reports from the tabs or Select all (Using the Check All box) and click on the export. The reports are generated using the following sqlldap statements.

 

 

Here are the sample reports generated uisng the audit export dialog, Please note that these are generated from our test active directory server so many reports are empty but columns inside the reports will give you some insight into how the reports are generated.

PDF REPORTS:

Reports Generated Using
All Objects Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE subtreescope
All Objects Created Today Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope
All Objects Modified Today Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where modifyTimeStamp <= CurrentEndofDay and modifyTimeStamp >=CurrentStartofDay subtreescope
Recently Deleted Objects Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope
All Objects Created Yesterday Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope
All Objects Modified Yesterday Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where modifyTimeStamp <= CurrentEndofDay -1 days and modifyTimeStamp >=CurrentStartofDay -1 days subtreescope
All Objects Created in Last 7 Days Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where createTimestamp >= CurrentTimestamp -7 days subtreescope
All Objects Modified in Last 7 Days Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where modifyTimeStamp >= CurrentTimestamp -7 days subtreescope
All Objects Created in Last 30 Days Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where createTimestamp >= CurrentTimestamp -30 days subtreescope
All Objects Modified in Last 30 Days Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where modifyTimeStamp >= CurrentTimestamp -30 days subtreescope
All Objects Created in Last 60 Days Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where createTimestamp >= CurrentTimestamp -60 days subtreescope
All Objects Modified in Last 60 Days Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where modifyTimeStamp >= CurrentTimestamp -60 days subtreescope
All Objects Created in Last 90 Days Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where createTimestamp >= CurrentTimestamp -90 days subtreescope
All Objects Modified in Last 90 Days Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where modifyTimeStamp >= CurrentTimestamp -90 days subtreescope
All Users Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 subtreescope
All Users Who Never Logged On Select sAMAccountName,cn,sn,lastlogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lastlogon=0 subtreescope
Password Never Expire Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and userAccountControl:1.2.840.113556.1.4.803:=65536 subtreescope
Disabled Users Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and userAccountControl:1.2.840.113556.1.4.803:=2 subtreescope
All Users Who Logged On Today Select sAMAccountName,cn,sn,lastlogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lastlogon <= CurrentEndofDay and lastlogon >=CurrentStartofDay subtreescope
Password Always Expire Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and userAccountControl:1.2.840.113556.1.4.803:!=65536 subtreescope
Enabled Users Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and userAccountControl:1.2.840.113556.1.4.803:!=2 subtreescope
All Users Who Logged On Yesterday Select sAMAccountName,cn,sn,lastlogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lastlogon <= CurrentEndofDay -1 days and lastlogon >=CurrentStartofDay -1 days subtreescope
Password Encrypted Allowed Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and userAccountControl:1.2.840.113556.1.4.803:=128 subtreescope
Recently Deleted Users Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectClass='user' and isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope
All Users Who Logged On In Last 7 Days Select sAMAccountName,cn,sn,lastlogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lastlogon <= CurrentEndofDay -1 days and lastlogon >=CurrentStartofDay -7 days subtreescope
Password Changed In Last 30 Days Select sAMAccountName,cn,sn,pwdLastSet from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and pwdLastSet!=0 and pwdLastSet>= CurrentTimestamp -30 days subtreescope
Locked Out Users Select sAMAccountName,cn,sn,lockoutTime from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lockoutTime>=1 subtreescope
All Users Who Logged On In Last 30 Days Select sAMAccountName,cn,sn,lastlogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lastlogon <= CurrentEndofDay -1 days and lastlogon >=CurrentStartofDay -30 days subtreescope
Password Changed In Last 60 Days Select sAMAccountName,cn,sn,pwdLastSet from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and pwdLastSet!=0 and pwdLastSet>= CurrentTimestamp -60 days subtreescope
Password Not Changed In Last 30 Days Select sAMAccountName,cn,sn,pwdLastSet from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and pwdLastSet!=0 and pwdLastSet<= CurrentTimestamp -30 days subtreescope
Password Not Changed In Last 60 Days Select sAMAccountName,cn,sn,pwdLastSet from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and pwdLastSet!=0 and pwdLastSet<= CurrentTimestamp -60 days subtreescope
All Users And Their Direct Groups Select sAMAccountName,memberOf,primaryGroupID from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 subtreescope
All Users With Logon Script Select sAMAccountName,cn,sn,scriptPath from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and scriptPath is not null subtreescope
Password Must Change At Next Logon Select sAMAccountName,cn,sn,pwdLastSet from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and pwdLastSet=0 subtreescope
All Users And Their Direct And Indirect Groups (Nested) Select sAMAccountName,memberOf,primaryGroupID from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 add ldapcontrols('1.2.940.113569') subtreescope
All Users Without Logon Script Select sAMAccountName,cn,sn,scriptPath from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and scriptPath is null subtreescope
Password Bad In Last 7 Days Select sAMAccountName,cn,sn,badPasswordTime from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and badPasswordTime>= CurrentTimestamp -7 days subtreescope
Password Bad In Last 30 Days Select sAMAccountName,cn,sn,badPasswordTime from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and badPasswordTime>= CurrentTimestamp -30 days subtreescope
All Users Last Logon Select sAMAccountName,cn,sn,lastLogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 add ldapcontrols('1.2.940.113558') subtreescope
All Users with Manager Select sAMAccountName,cn,sn,manager from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and manager is not null subtreescope
All Users Without Manager Select sAMAccountName,cn,sn,manager from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and manager is null subtreescope
All Users Modified Today Select sAMAccountName,cn,sn,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope
All Users Modified Yesterday Select sAMAccountName,cn,sn,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope
Account Expired Select sAMAccountName,cn,sn,accountExpires,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and accountExpires!=0 and accountExpires!=9223372036854775807 and accountExpires<= CurrentTimestamp subtreescope
All Users Modified In Last 30 Days Select sAMAccountName,cn,sn,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp >= CurrentTimestamp -30 days subtreescope
Account Never Expires Select sAMAccountName,cn,sn,accountExpires from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and (accountExpires=0 or accountExpires=9223372036854775807) subtreescope
All Users Created Today Select sAMAccountName,cn,sn,accountExpires,createTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope
All Users Modified In Last 60 Days Select sAMAccountName,cn,sn,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp >= CurrentTimestamp -60 days subtreescope
Account Expired In Last 7 Days Select sAMAccountName,cn,sn,accountExpires,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and accountExpires!=0 and accountExpires!=9223372036854775807 and accountExpires>= CurrentTimestamp -7 days and accountExpires<= CurrentTimestamp subtreescope
All Users Created Yesterday Select sAMAccountName,cn,sn,accountExpires,createTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and accountExpires!=0 and accountExpires!=9223372036854775807 and accountExpires>= CurrentTimestamp -7 days and accountExpires<= CurrentTimestamp subtreescope
All Users Modified In Last 90 Days Select sAMAccountName,cn,sn,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp >= CurrentTimestamp -90 days subtreescope
Account Expire In Next 30 Days Select sAMAccountName,cn,sn,accountExpires,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and accountExpires!=0 and accountExpires!=9223372036854775807 and accountExpires<= CurrentTimestamp + 30 days and accountExpires>= CurrentTimestamp subtreescope
All Users Created In Last 30 Days Select sAMAccountName,cn,sn,createTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and createTimestamp >= CurrentTimestamp -30 days subtreescope
All Groups Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=top and objectClass=group subtreescope
All Group And Their Direct Members Select sAMAccountName,member from RootDSE where objectClass=top and objectClass=group subtreescope
All Groups Modified Today Select sAMAccountName,modifyTimestamp, member from RootDSE where objectClass=top and objectClass=group and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope
All Groups With Members Select sAMAccountName,member from RootDSE where objectClass=top and objectClass=group and member is not null subtreescope
All Groups And Their Direct And Indirect Members (Nested) Select sAMAccountName,member from RootDSE where objectClass=top and objectClass=group add ldapcontrols('1.2.940.113568') subtreescope
All Groups Modified Yesterday Select sAMAccountName,member, modifyTimestamp from RootDSE where objectClass=top and objectClass=group and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope
All Groups Without Members Select sAMAccountName,member from RootDSE where objectClass=top and objectClass=group and member is null subtreescope
All Groups Modified In Last 7 Days Select sAMAccountName,member, modifyTimestamp from RootDSE where objectClass=top and objectClass=group and modifyTimestamp >= CurrentTimestamp -7 days subtreescope
Managed Groups Select sAMAccountName,managedby, member from RootDSE where objectClass=top and objectClass=group and managedby is not null subtreescope
All Groups Modified In Last 30 Days Select sAMAccountName,member, modifyTimestamp from RootDSE where objectClass=top and objectClass=group and modifyTimestamp >= CurrentTimestamp -30 days subtreescope
UnManaged Groups Select sAMAccountName,managedby, member from RootDSE where objectClass=top and objectClass=group and managedby is null subtreescope
All Groups Member of Other Groups (Direct) Select sAMAccountName,memberOf from RootDSE where objectClass=top and objectClass=group subtreescope
All Groups Modified In Last 60 Days Select sAMAccountName,member, modifyTimestamp from RootDSE where objectClass=top and objectClass=group and modifyTimestamp >= CurrentTimestamp -60 days subtreescope
Security Groups Select sAMAccountName,member,groupType from RootDSE where objectClass=top and objectClass=group and groupType:1.2.840.113556.1.4.804:=2147483648 subtreescope
All Groups Member of Other Groups (Direct And Nested) Select sAMAccountName,memberOf from RootDSE where objectClass=top and objectClass=group add ldapcontrols('1.2.940.113569') subtreescope
All Groups Modified In Last 90 Days Select sAMAccountName,member, modifyTimestamp from RootDSE where objectClass=top and objectClass=group and modifyTimestamp >= CurrentTimestamp -90 days subtreescope
Distribution Groups Select sAMAccountName,member, groupType from RootDSE where objectClass=top and objectClass=group and (groupType:1.2.840.113556.1.4.804:!=2147483648 or sAMAccountType=268435457) subtreescope
Universal Groups Select sAMAccountName,member, groupType from RootDSE where groupType:1.2.840.113556.1.4.803:=8 subtreescope
Mail Enabled Groups Select sAMAccountName,member, mail from RootDSE where objectClass=top and objectClass=group and mail is not null and sAMAccountType!=268435457 subtreescope
All Groups Created Today Select sAMAccountName,createTimestamp, member from RootDSE where objectClass=top and objectClass=group and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope
Recently Deleted Groups Select sAMAccountName,createTimestamp, modifyTimestamp, isDeleted from RootDSE where objectClass=top and objectClass=group and isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope
All Groups Created Yesterday Select sAMAccountName,member, createTimestamp from RootDSE where objectClass=top and objectClass=group and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope
All Groups Created In Last 7 Days Select sAMAccountName,member, createTimestamp from RootDSE where objectClass=top and objectClass=group and createTimestamp >= CurrentTimestamp -7 days subtreescope
All Groups Created In Last 30 Days Select sAMAccountName,member, createTimestamp from RootDSE where objectClass=top and objectClass=group and createTimestamp >= CurrentTimestamp -30 days subtreescope
All Groups Created In Last 60 Days Select sAMAccountName,member, createTimestamp from RootDSE where objectClass=top and objectClass=group and createTimestamp >= CurrentTimestamp -60 days subtreescope
All Groups Created In Last 90 Days Select sAMAccountName,member, createTimestamp from RootDSE where objectClass=top and objectClass=group and createTimestamp >= CurrentTimestamp -90 days subtreescope
All Contacts Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=contact subtreescope
All Contacts Created Today Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=contact and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope
All Contacts Modified Today Select sAMAccountName,cn,sn,modifyTimeStamp from RootDSE where objectClass=contact and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope
Mail Enabled Contacts Select sAMAccountName,cn,sn,mailnickname,targetAddress from RootDSE where objectClass=contact and objectClass=person and mailnickname is not null and targetAddress is not null subtreescope
All Contacts Created Yesterday Select sAMAccountName,cn,sn,createTimestamp from RootDSE where objectClass=contact and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope
All Contacts Modified Yesterday Select sAMAccountName,cn,sn,modifyTimestamp from RootDSE where objectClass=contact and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope
Recently Deleted Contacts Select sAMAccountName,isDeleted,createTimestamp,modifyTimestamp from RootDSE where objectClass='contact' and isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope
All Contacts Created In Last 7 Days Select sAMAccountName,cn,sn,createTimestamp from RootDSE where objectClass=contact and createTimestamp >= CurrentTimestamp -7 days subtreescope
All Contacts Modified In Last 7 Days Select sAMAccountName,cn,sn,modifyTimestamp from RootDSE where objectClass=contact and modifyTimestamp >= CurrentTimestamp -7 days subtreescope
All Contacts Created In Last 30 Days Select sAMAccountName,cn,sn,createTimestamp from RootDSE where objectClass=contact and createTimestamp >= CurrentTimestamp -30 days subtreescope
All Contacts Modified In Last 30 Days Select sAMAccountName,cn,sn,modifyTimestamp from RootDSE where objectClass=contact and modifyTimestamp >= CurrentTimestamp -30 days subtreescope
All Contacts Created In Last 60 Days Select sAMAccountName,cn,sn,createTimestamp from RootDSE where objectClass=contact and createTimestamp >= CurrentTimestamp -60 days subtreescope
All Contacts Modified In Last 60 Days Select sAMAccountName,cn,sn,modifyTimestamp from RootDSE where objectClass=contact and modifyTimestamp >= CurrentTimestamp -60 days subtreescope
All Contacts Created In Last 90 Days Select sAMAccountName,cn,sn,createTimestamp from RootDSE where objectClass=contact and createTimestamp >= CurrentTimestamp -90 days subtreescope
All Contacts Modified In Last 90 Days Select sAMAccountName,cn,sn,modifyTimestamp from RootDSE where objectClass=contact and modifyTimestamp >= CurrentTimestamp -90 days subtreescope
All Computers Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp,modifyTimestamp from RootDSE where objectClass=computer subtreescope
All Computers Created Today Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp from RootDSE where objectClass=computer and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope
Windows Vista Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Vista% subtreescope
Disabled Computers Select sAMAccountName,operatingSystem,operatingSystemServicePack,userAccountControl from RootDSE where objectClass=computer and userAccountControl:1.2.840.113556.1.4.803:=2 subtreescope
All Computers Created Yesterday Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp from RootDSE where objectClass=computer and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope
Windows XP Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows XP% subtreescope
Enabled Computers Select sAMAccountName,operatingSystem,operatingSystemServicePack,userAccountControl from RootDSE where objectClass=computer and userAccountControl:1.2.840.113556.1.4.803:!=2 subtreescope
All Computers Created In Last 7 Days Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp from RootDSE where objectClass=computer and createTimestamp >= CurrentTimestamp -7 days subtreescope
Windows Server 2003 Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Server 2003% subtreescope
Managed Computers Select sAMAccountName,operatingSystem,operatingSystemServicePack,managedby from RootDSE where objectClass=computer and managedby is not null subtreescope
All Computers Created In Last 30 Days Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp from RootDSE where objectClass=computer and createTimestamp >= CurrentTimestamp -30 days subtreescope
Window 2000 Server Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Server 2000% subtreescope
UnManaged Computers Select sAMAccountName,operatingSystem,operatingSystemServicePack,managedby from RootDSE where objectClass=computer and managedby is null subtreescope
All Computers Created In Last 60 Days Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp from RootDSE where objectClass=computer and createTimestamp >= CurrentTimestamp -60 days subtreescope
Windows 2008 Server Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Server 2008% subtreescope
Recently Deleted Computers Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass='computer' and isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope
All Computers Created In Last 90 Days Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp from RootDSE where objectClass=computer and createTimestamp >= CurrentTimestamp -90 days subtreescope
Windows 7 Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows 7% subtreescope
Non Windows OS Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem !=Win* subtreescope
All Computers Modified Today Select sAMAccountName,operatingSystem,operatingSystemServicePack,modifyTimestamp from RootDSE where objectClass=computer and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope
All Computers Modified Yesterday Select sAMAccountName,operatingSystem,operatingSystemServicePack,modifyTimestamp from RootDSE where objectClass=computer and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope
All Computers Modified In Last 7 Days Select sAMAccountName,operatingSystem,operatingSystemServicePack,modifyTimestamp from RootDSE where objectClass=computer and modifyTimestamp >= CurrentTimestamp -7 days subtreescope
All Computers Modified In Last 30 Days Select sAMAccountName,operatingSystem,operatingSystemServicePack,modifyTimestamp from RootDSE where objectClass=computer and modifyTimestamp >= CurrentTimestamp -30 days subtreescope
All Computers Modified In Last 60 Days Select sAMAccountName,operatingSystem,operatingSystemServicePack,modifyTimestamp from RootDSE where objectClass=computer and modifyTimestamp >= CurrentTimestamp -60 days subtreescope
All Computers Modified In Last 90 Days Select sAMAccountName,operatingSystem,operatingSystemServicePack,modifyTimestamp from RootDSE where objectClass=computer and modifyTimestamp >= CurrentTimestamp -90 days subtreescope
All Printers Select printerName,serverName,location,driverName,uNCName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=printqueue subtreescope
All Printers Created Today Select printerName,serverName,location,driverName,uNCName,createTimeStamp from RootDSE where objectClass=printqueue and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope
All Printers Modified Today Select printerName,serverName,location,driverName,uNCName,modifyTimeStamp from RootDSE where objectClass=printqueue and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope
Disabled Printers Select printerName,serverName,location,driverName,uNCName,createTimeStamp,modifyTimeStamp,userAccountControl from RootDSE where objectClass=printqueue and userAccountControl:1.2.840.113556.1.4.803:=2 subtreescope
All Printers Created Yesterday Select printerName,serverName,location,driverName,uNCName,createTimeStamp from RootDSE where objectClass=printqueue and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope
All Printers Modified Yesterday Select printerName,serverName,location,driverName,uNCName,modifyTimeStamp from RootDSE where objectClass=printqueue and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope
Enabled Printers Select printerName,serverName,location,driverName,uNCName,createTimeStamp,modifyTimeStamp,userAccountControl from RootDSE where objectClass=printqueue and userAccountControl:1.2.840.113556.1.4.803:!=2 subtreescope
All Printers Created In Last 7 Days Select printerName,serverName,location,driverName,uNCName,createTimeStamp from RootDSE where objectClass=printqueue and createTimestamp >= CurrentTimestamp -7 days subtreescope
All Printers Modified In Last 7 Days Select printerName,serverName,location,driverName,uNCName,modifyTimeStamp from RootDSE where objectClass=printqueue and modifyTimestamp >= CurrentTimestamp -7 days subtreescope
Managed Printers Select printerName,serverName,location,driverName,uNCName,managedby,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=printqueue and managedby is not null subtreescope
All Printers Created In Last 30 Days Select printerName,serverName,location,driverName,uNCName,createTimeStamp from RootDSE where objectClass=printqueue and createTimestamp >= CurrentTimestamp -30 days subtreescope
All Printers Modified In Last 30 Days Select printerName,serverName,location,driverName,uNCName,modifyTimeStamp from RootDSE where objectClass=printqueue and modifyTimestamp >= CurrentTimestamp -30 days subtreescope
UnManaged Printers Select printerName,serverName,location,driverName,uNCName,managedby,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=printqueue and managedby is null subtreescope
All Printers Created In Last 60 Days Select printerName,serverName,location,driverName,uNCName,createTimeStamp from RootDSE where objectClass=printqueue and createTimestamp >= CurrentTimestamp -60 days subtreescope
All Printers Modified In Last 60 Days Select printerName,serverName,location,driverName,uNCName,modifyTimeStamp from RootDSE where objectClass=printqueue and modifyTimestamp >= CurrentTimestamp -60 days subtreescope
Recently Deleted Printers Select printerName,serverName,location,driverName,uNCName,createTimeStamp,modifyTimeStamp,isDeleted from RootDSE where objectClass=printqueue and isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope
All Printers Created In Last 90 Days Select printerName,serverName,location,driverName,uNCName,createTimeStamp from RootDSE where objectClass=printqueue and createTimestamp >= CurrentTimestamp -90 days subtreescope
All Printers Modified In Last 90 Days Select printerName,serverName,location,driverName,uNCName,modifyTimeStamp from RootDSE where objectClass=printqueue and modifyTimestamp >= CurrentTimestamp -90 days subtreescope
Mailbox Enabled Users Select sAMAccountName,cn,mailNickname,msExchHomeServerName,proxyAddresses,createTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null subtreescope
Default Sending Size Select sAMAccountName,cn,sn,mailNickname,msExchHomeServerName,submissionContLength,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and submissionContLength is null subtreescope
Outlook Web Access Enabled Users Select sAMAccountName,sn,cn,msExchHomeServerName,mailNickname,protocolsettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*HTTP§1§1* or protocolsettings!=*OWA§0*) subtreescope
Mail Enabled Users Select sAMAccountName,sn,cn,mailNickname,targetAddress from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and targetAddress is not null subtreescope
Restricted Sending Size Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,submissionContLength from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and submissionContLength is not null subtreescope
Outlook Web Access Disabled Users Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,protocolsettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*HTTP§0§1* or protocolsettings=*OWA§0*) subtreescope
Mail Enabled Groups Select sAMAccountName,sn,cn,mail,mailNickname,groupType from RootDSE where objectClass=group and mailNickname is not null subtreescope
Default Recipient Size Select sAMAccountName,mailNickname,msExchHomeServerName,msExchRecipLimit from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and msExchRecipLimit is null subtreescope
POP3 Enabled Users Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,protocolsettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*POP3§1*) subtreescope
Users with Email Proxy Enabled Select sAMAccountName,sn,cn,mailNickname,proxyAddresses from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and proxyAddresses is not null subtreescope
Restricted recipient size Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,msExchRecipLimit from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and msExchRecipLimit is not null subtreescope
POP3 Disabled Users Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,protocolsettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*POP3§0*) subtreescope
Users with Email Proxy Disabled Select sAMAccountName,sn,cn,mailNickname,proxyAddresses from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and proxyAddresses is null subtreescope
Default Receiving size Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,delivContLength from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and delivContLength is null subtreescope
IMAP4 Enabled Users Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,protocolsettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*IMAP4§1*) subtreescope
Restricted Receiving size Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,delivContLength from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and delivContLength is not null subtreescope
IMAP4 Disabled Users Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,protocolsettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*IMAP4§0*) subtreescope
Accept Messages from Everyone Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,homeMDB,targetAddress,authOrig,unauthOrig from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and (homeMDB is not null or msExchHomeServerName is not null or targetAddress is not null) and authOrig is null and unauthOrig is null subtreescope
Default storage limit Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,mDBUseDefaults from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and mDBUseDefaults=TRUE subtreescope
Accept Messages Restricted Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,homeMDB,targetAddress,authOrig from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and (homeMDB is not null or msExchHomeServerName is not null or targetAddress is not null) and (authOrig is not null or unauthOrig is not null) subtreescope
Mailbox size limits Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,mDBUseDefaults from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and mDBUseDefaults=FALSE subtreescope
Hidden from exchange address lists Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,msExchHideFromAddressLists from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and msExchHideFromAddressLists=TRUE subtreescope
Unhidden from exchange address lists Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,msExchHideFromAddressLists from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and (msExchHideFromAddressLists=FALSE or msExchHideFromAddressLists is null) subtreescope
Mail is forwarded to another Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,altRecipient from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and altRecipient is not null subtreescope
All Organizational Units Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit subtreescope
All OU's Modified Today Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope
All OU's Created Today Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope
All OU's Modified Yesterday Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope
All OU's Created Yesterday Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope
All OU's Modified In Last 7 Days Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and modifyTimestamp >= CurrentTimestamp -7 days subtreescope
All OU's Created In Last 7 Days Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and createTimestamp >= CurrentTimestamp -7 days subtreescope
All OU's Modified In Last 30 Days Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and modifyTimestamp >= CurrentTimestamp -30 days subtreescope
All OU's Created In Last 30 Days Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and createTimestamp >= CurrentTimestamp -30 days subtreescope
All OU's Modified In Last 60 Days Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and modifyTimestamp >= CurrentTimestamp -60 days subtreescope
All OU's Created In Last 60 Days Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and createTimestamp >= CurrentTimestamp -60 days subtreescope
All OU's Modified In Last 90 Days Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and modifyTimestamp >= CurrentTimestamp -90 days subtreescope
All OU's Created In Last 90 Days Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and createTimestamp >= CurrentTimestamp -90 days subtreescope
All GPOs Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer subtreescope
All GPOs Modified Today Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope
All GPOs Created Today Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope
All Deleted GPOs Select cn,name,displayName,createTimeStamp,modifyTimeStamp,isDeleted from RootDSE where objectClass=groupPolicyContainer and isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope
All GPOs Modified Yesterday Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope
All GPOs Created Yesterday Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope
All Disabled GPOs Select cn,name,displayName,createTimeStamp,modifyTimeStamp,flags from RootDSE where objectClass=groupPolicyContainer and flags=3 subtreescope
All GPOs Modified In Last 7 Days Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp >= CurrentTimestamp -7 days subtreescope
All GPOs Created In Last 7 Days Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and createTimestamp >= CurrentTimestamp -7 days subtreescope
User Settings Disabled GPOs Select cn,name,displayName,createTimeStamp,modifyTimeStamp,flags from RootDSE where objectClass=groupPolicyContainer and (flags=3 or flags=1) subtreescope
All GPOs Modified In Last 30 Days Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp >= CurrentTimestamp -30 days subtreescope
All GPOs Created In Last 30 Days Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and createTimestamp >= CurrentTimestamp -30 days subtreescope
All GPOs Modified In Last 60 Days Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp >= CurrentTimestamp -60 days subtreescope
All GPOs Created In Last 60 Days Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and createTimestamp >= CurrentTimestamp -60 days subtreescope
All GPOs Modified In Last 90 Days Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp >= CurrentTimestamp -90 days subtreescope
All GPOs Created In Last 90 Days Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and createTimestamp >= CurrentTimestamp -90 days subtreescope

EXCEL REPORTS

Reports Generated Using
All Objects Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE subtreescope
All Objects Created Today Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope
All Objects Modified Today Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where modifyTimeStamp <= CurrentEndofDay and modifyTimeStamp >=CurrentStartofDay subtreescope
Recently Deleted Objects Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope
All Objects Created Yesterday Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope
All Objects Modified Yesterday Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where modifyTimeStamp <= CurrentEndofDay -1 days and modifyTimeStamp >=CurrentStartofDay -1 days subtreescope
All Objects Created in Last 7 Days Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where createTimestamp >= CurrentTimestamp -7 days subtreescope
All Objects Modified in Last 7 Days Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where modifyTimeStamp >= CurrentTimestamp -7 days subtreescope
All Objects Created in Last 30 Days Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where createTimestamp >= CurrentTimestamp -30 days subtreescope
All Objects Modified in Last 30 Days Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where modifyTimeStamp >= CurrentTimestamp -30 days subtreescope
All Objects Created in Last 60 Days Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where createTimestamp >= CurrentTimestamp -60 days subtreescope
All Objects Modified in Last 60 Days Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where modifyTimeStamp >= CurrentTimestamp -60 days subtreescope
All Objects Created in Last 90 Days Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where createTimestamp >= CurrentTimestamp -90 days subtreescope
All Objects Modified in Last 90 Days Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where modifyTimeStamp >= CurrentTimestamp -90 days subtreescope
All Users Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 subtreescope
All Users Who Never Logged On Select sAMAccountName,cn,sn,lastlogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lastlogon=0 subtreescope
Password Never Expire Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and userAccountControl:1.2.840.113556.1.4.803:=65536 subtreescope
Disabled Users Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and userAccountControl:1.2.840.113556.1.4.803:=2 subtreescope
All Users Who Logged On Today Select sAMAccountName,cn,sn,lastlogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lastlogon <= CurrentEndofDay and lastlogon >=CurrentStartofDay subtreescope
Password Always Expire Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and userAccountControl:1.2.840.113556.1.4.803:!=65536 subtreescope
Enabled Users Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and userAccountControl:1.2.840.113556.1.4.803:!=2 subtreescope
All Users Who Logged On Yesterday Select sAMAccountName,cn,sn,lastlogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lastlogon <= CurrentEndofDay -1 days and lastlogon >=CurrentStartofDay -1 days subtreescope
Password Encrypted Allowed Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and userAccountControl:1.2.840.113556.1.4.803:=128 subtreescope
Recently Deleted Users Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectClass='user' and isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope
All Users Who Logged On In Last 7 Days Select sAMAccountName,cn,sn,lastlogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lastlogon <= CurrentEndofDay -1 days and lastlogon >=CurrentStartofDay -7 days subtreescope
Password Changed In Last 30 Days Select sAMAccountName,cn,sn,pwdLastSet from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and pwdLastSet!=0 and pwdLastSet>= CurrentTimestamp -30 days subtreescope
Locked Out Users Select sAMAccountName,cn,sn,lockoutTime from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lockoutTime>=1 subtreescope
All Users Who Logged On In Last 30 Days Select sAMAccountName,cn,sn,lastlogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lastlogon <= CurrentEndofDay -1 days and lastlogon >=CurrentStartofDay -30 days subtreescope
Password Changed In Last 60 Days Select sAMAccountName,cn,sn,pwdLastSet from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and pwdLastSet!=0 and pwdLastSet>= CurrentTimestamp -60 days subtreescope
Password Not Changed In Last 30 Days Select sAMAccountName,cn,sn,pwdLastSet from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and pwdLastSet!=0 and pwdLastSet<= CurrentTimestamp -30 days subtreescope
Password Not Changed In Last 60 Days Select sAMAccountName,cn,sn,pwdLastSet from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and pwdLastSet!=0 and pwdLastSet<= CurrentTimestamp -60 days subtreescope
All Users And Their Direct Groups Select sAMAccountName,memberOf,primaryGroupID from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 subtreescope
All Users With Logon Script Select sAMAccountName,cn,sn,scriptPath from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and scriptPath is not null subtreescope
Password Must Change At Next Logon Select sAMAccountName,cn,sn,pwdLastSet from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and pwdLastSet=0 subtreescope
All Users And Their Direct And Indirect Groups (Nested) Select sAMAccountName,memberOf,primaryGroupID from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 add ldapcontrols('1.2.940.113569') subtreescope
All Users Without Logon Script Select sAMAccountName,cn,sn,scriptPath from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and scriptPath is null subtreescope
Password Bad In Last 7 Days Select sAMAccountName,cn,sn,badPasswordTime from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and badPasswordTime>= CurrentTimestamp -7 days subtreescope
Password Bad In Last 30 Days Select sAMAccountName,cn,sn,badPasswordTime from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and badPasswordTime>= CurrentTimestamp -30 days subtreescope
All Users Last Logon Select sAMAccountName,cn,sn,lastLogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 add ldapcontrols('1.2.940.113558') subtreescope
All Users with Manager Select sAMAccountName,cn,sn,manager from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and manager is not null subtreescope
All Users Without Manager Select sAMAccountName,cn,sn,manager from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and manager is null subtreescope
All Users Modified Today Select sAMAccountName,cn,sn,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope
All Users Modified Yesterday Select sAMAccountName,cn,sn,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope
Account Expired Select sAMAccountName,cn,sn,accountExpires,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and accountExpires!=0 and accountExpires!=9223372036854775807 and accountExpires<= CurrentTimestamp subtreescope
All Users Modified In Last 30 Days Select sAMAccountName,cn,sn,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp >= CurrentTimestamp -30 days subtreescope
Account Never Expires Select sAMAccountName,cn,sn,accountExpires from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and (accountExpires=0 or accountExpires=9223372036854775807) subtreescope
All Users Created Today Select sAMAccountName,cn,sn,accountExpires,createTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope
All Users Modified In Last 60 Days Select sAMAccountName,cn,sn,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp >= CurrentTimestamp -60 days subtreescope
Account Expired In Last 7 Days Select sAMAccountName,cn,sn,accountExpires,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and accountExpires!=0 and accountExpires!=9223372036854775807 and accountExpires>= CurrentTimestamp -7 days and accountExpires<= CurrentTimestamp subtreescope
All Users Created Yesterday Select sAMAccountName,cn,sn,accountExpires,createTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and accountExpires!=0 and accountExpires!=9223372036854775807 and accountExpires>= CurrentTimestamp -7 days and accountExpires<= CurrentTimestamp subtreescope
All Users Modified In Last 90 Days Select sAMAccountName,cn,sn,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp >= CurrentTimestamp -90 days subtreescope
Account Expire In Next 30 Days Select sAMAccountName,cn,sn,accountExpires,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and accountExpires!=0 and accountExpires!=9223372036854775807 and accountExpires<= CurrentTimestamp + 30 days and accountExpires>= CurrentTimestamp subtreescope
All Users Created In Last 30 Days Select sAMAccountName,cn,sn,createTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and createTimestamp >= CurrentTimestamp -30 days subtreescope
All Groups Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=top and objectClass=group subtreescope
All Group And Their Direct Members Select sAMAccountName,member from RootDSE where objectClass=top and objectClass=group subtreescope
All Groups Modified Today Select sAMAccountName,modifyTimestamp, member from RootDSE where objectClass=top and objectClass=group and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope
All Groups With Members Select sAMAccountName,member from RootDSE where objectClass=top and objectClass=group and member is not null subtreescope
All Groups And Their Direct And Indirect Members (Nested) Select sAMAccountName,member from RootDSE where objectClass=top and objectClass=group add ldapcontrols('1.2.940.113568') subtreescope
All Groups Modified Yesterday Select sAMAccountName,member, modifyTimestamp from RootDSE where objectClass=top and objectClass=group and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope
All Groups Without Members Select sAMAccountName,member from RootDSE where objectClass=top and objectClass=group and member is null subtreescope
All Groups Modified In Last 7 Days Select sAMAccountName,member, modifyTimestamp from RootDSE where objectClass=top and objectClass=group and modifyTimestamp >= CurrentTimestamp -7 days subtreescope
Managed Groups Select sAMAccountName,managedby, member from RootDSE where objectClass=top and objectClass=group and managedby is not null subtreescope
All Groups Modified In Last 30 Days Select sAMAccountName,member, modifyTimestamp from RootDSE where objectClass=top and objectClass=group and modifyTimestamp >= CurrentTimestamp -30 days subtreescope
UnManaged Groups Select sAMAccountName,managedby, member from RootDSE where objectClass=top and objectClass=group and managedby is null subtreescope
All Groups Member of Other Groups (Direct) Select sAMAccountName,memberOf from RootDSE where objectClass=top and objectClass=group subtreescope
All Groups Modified In Last 60 Days Select sAMAccountName,member, modifyTimestamp from RootDSE where objectClass=top and objectClass=group and modifyTimestamp >= CurrentTimestamp -60 days subtreescope
Security Groups Select sAMAccountName,member,groupType from RootDSE where objectClass=top and objectClass=group and groupType:1.2.840.113556.1.4.804:=2147483648 subtreescope
All Groups Member of Other Groups (Direct And Nested) Select sAMAccountName,memberOf from RootDSE where objectClass=top and objectClass=group add ldapcontrols('1.2.940.113569') subtreescope
All Groups Modified In Last 90 Days Select sAMAccountName,member, modifyTimestamp from RootDSE where objectClass=top and objectClass=group and modifyTimestamp >= CurrentTimestamp -90 days subtreescope
Distribution Groups Select sAMAccountName,member, groupType from RootDSE where objectClass=top and objectClass=group and (groupType:1.2.840.113556.1.4.804:!=2147483648 or sAMAccountType=268435457) subtreescope
Universal Groups Select sAMAccountName,member, groupType from RootDSE where groupType:1.2.840.113556.1.4.803:=8 subtreescope
Mail Enabled Groups Select sAMAccountName,member, mail from RootDSE where objectClass=top and objectClass=group and mail is not null and sAMAccountType!=268435457 subtreescope
All Groups Created Today Select sAMAccountName,createTimestamp, member from RootDSE where objectClass=top and objectClass=group and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope
Recently Deleted Groups Select sAMAccountName,createTimestamp, modifyTimestamp, isDeleted from RootDSE where objectClass=top and objectClass=group and isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope
All Groups Created Yesterday Select sAMAccountName,member, createTimestamp from RootDSE where objectClass=top and objectClass=group and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope
All Groups Created In Last 7 Days Select sAMAccountName,member, createTimestamp from RootDSE where objectClass=top and objectClass=group and createTimestamp >= CurrentTimestamp -7 days subtreescope
All Groups Created In Last 30 Days Select sAMAccountName,member, createTimestamp from RootDSE where objectClass=top and objectClass=group and createTimestamp >= CurrentTimestamp -30 days subtreescope
All Groups Created In Last 60 Days Select sAMAccountName,member, createTimestamp from RootDSE where objectClass=top and objectClass=group and createTimestamp >= CurrentTimestamp -60 days subtreescope
All Groups Created In Last 90 Days Select sAMAccountName,member, createTimestamp from RootDSE where objectClass=top and objectClass=group and createTimestamp >= CurrentTimestamp -90 days subtreescope
All Contacts Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=contact subtreescope
All Contacts Created Today Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=contact and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope
All Contacts Modified Today Select sAMAccountName,cn,sn,modifyTimeStamp from RootDSE where objectClass=contact and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope
Mail Enabled Contacts Select sAMAccountName,cn,sn,mailnickname,targetAddress from RootDSE where objectClass=contact and objectClass=person and mailnickname is not null and targetAddress is not null subtreescope
All Contacts Created Yesterday Select sAMAccountName,cn,sn,createTimestamp from RootDSE where objectClass=contact and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope
All Contacts Modified Yesterday Select sAMAccountName,cn,sn,modifyTimestamp from RootDSE where objectClass=contact and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope
Recently Deleted Contacts Select sAMAccountName,isDeleted,createTimestamp,modifyTimestamp from RootDSE where objectClass='contact' and isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope
All Contacts Created In Last 7 Days Select sAMAccountName,cn,sn,createTimestamp from RootDSE where objectClass=contact and createTimestamp >= CurrentTimestamp -7 days subtreescope
All Contacts Modified In Last 7 Days Select sAMAccountName,cn,sn,modifyTimestamp from RootDSE where objectClass=contact and modifyTimestamp >= CurrentTimestamp -7 days subtreescope
All Contacts Created In Last 30 Days Select sAMAccountName,cn,sn,createTimestamp from RootDSE where objectClass=contact and createTimestamp >= CurrentTimestamp -30 days subtreescope
All Contacts Modified In Last 30 Days Select sAMAccountName,cn,sn,modifyTimestamp from RootDSE where objectClass=contact and modifyTimestamp >= CurrentTimestamp -30 days subtreescope
All Contacts Created In Last 60 Days Select sAMAccountName,cn,sn,createTimestamp from RootDSE where objectClass=contact and createTimestamp >= CurrentTimestamp -60 days subtreescope
All Contacts Modified In Last 60 Days Select sAMAccountName,cn,sn,modifyTimestamp from RootDSE where objectClass=contact and modifyTimestamp >= CurrentTimestamp -60 days subtreescope
All Contacts Created In Last 90 Days Select sAMAccountName,cn,sn,createTimestamp from RootDSE where objectClass=contact and createTimestamp >= CurrentTimestamp -90 days subtreescope
All Contacts Modified In Last 90 Days Select sAMAccountName,cn,sn,modifyTimestamp from RootDSE where objectClass=contact and modifyTimestamp >= CurrentTimestamp -90 days subtreescope
All Computers Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp,modifyTimestamp from RootDSE where objectClass=computer subtreescope
All Computers Created Today Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp from RootDSE where objectClass=computer and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope
Windows Vista Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Vista% subtreescope
Disabled Computers Select sAMAccountName,operatingSystem,operatingSystemServicePack,userAccountControl from RootDSE where objectClass=computer and userAccountControl:1.2.840.113556.1.4.803:=2 subtreescope
All Computers Created Yesterday Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp from RootDSE where objectClass=computer and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope
Windows XP Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows XP% subtreescope
Enabled Computers Select sAMAccountName,operatingSystem,operatingSystemServicePack,userAccountControl from RootDSE where objectClass=computer and userAccountControl:1.2.840.113556.1.4.803:!=2 subtreescope
All Computers Created In Last 7 Days Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp from RootDSE where objectClass=computer and createTimestamp >= CurrentTimestamp -7 days subtreescope
Windows Server 2003 Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Server 2003% subtreescope
Managed Computers Select sAMAccountName,operatingSystem,operatingSystemServicePack,managedby from RootDSE where objectClass=computer and managedby is not null subtreescope
All Computers Created In Last 30 Days Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp from RootDSE where objectClass=computer and createTimestamp >= CurrentTimestamp -30 days subtreescope
Window 2000 Server Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Server 2000% subtreescope
UnManaged Computers Select sAMAccountName,operatingSystem,operatingSystemServicePack,managedby from RootDSE where objectClass=computer and managedby is null subtreescope
All Computers Created In Last 60 Days Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp from RootDSE where objectClass=computer and createTimestamp >= CurrentTimestamp -60 days subtreescope
Windows 2008 Server Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Server 2008% subtreescope
Recently Deleted Computers Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass='computer' and isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope
All Computers Created In Last 90 Days Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp from RootDSE where objectClass=computer and createTimestamp >= CurrentTimestamp -90 days subtreescope
Windows 7 Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows 7% subtreescope
Non Windows OS Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem !=Win* subtreescope
All Computers Modified Today Select sAMAccountName,operatingSystem,operatingSystemServicePack,modifyTimestamp from RootDSE where objectClass=computer and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope
All Computers Modified Yesterday Select sAMAccountName,operatingSystem,operatingSystemServicePack,modifyTimestamp from RootDSE where objectClass=computer and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope
All Computers Modified In Last 7 Days Select sAMAccountName,operatingSystem,operatingSystemServicePack,modifyTimestamp from RootDSE where objectClass=computer and modifyTimestamp >= CurrentTimestamp -7 days subtreescope
All Computers Modified In Last 30 Days Select sAMAccountName,operatingSystem,operatingSystemServicePack,modifyTimestamp from RootDSE where objectClass=computer and modifyTimestamp >= CurrentTimestamp -30 days subtreescope
All Computers Modified In Last 60 Days Select sAMAccountName,operatingSystem,operatingSystemServicePack,modifyTimestamp from RootDSE where objectClass=computer and modifyTimestamp >= CurrentTimestamp -60 days subtreescope
All Computers Modified In Last 90 Days Select sAMAccountName,operatingSystem,operatingSystemServicePack,modifyTimestamp from RootDSE where objectClass=computer and modifyTimestamp >= CurrentTimestamp -90 days subtreescope
All Printers Select printerName,serverName,location,driverName,uNCName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=printqueue subtreescope
All Printers Created Today Select printerName,serverName,location,driverName,uNCName,createTimeStamp from RootDSE where objectClass=printqueue and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope
All Printers Modified Today Select printerName,serverName,location,driverName,uNCName,modifyTimeStamp from RootDSE where objectClass=printqueue and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope
Disabled Printers Select printerName,serverName,location,driverName,uNCName,createTimeStamp,modifyTimeStamp,userAccountControl from RootDSE where objectClass=printqueue and userAccountControl:1.2.840.113556.1.4.803:=2 subtreescope
All Printers Created Yesterday Select printerName,serverName,location,driverName,uNCName,createTimeStamp from RootDSE where objectClass=printqueue and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope
All Printers Modified Yesterday Select printerName,serverName,location,driverName,uNCName,modifyTimeStamp from RootDSE where objectClass=printqueue and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope
Enabled Printers Select printerName,serverName,location,driverName,uNCName,createTimeStamp,modifyTimeStamp,userAccountControl from RootDSE where objectClass=printqueue and userAccountControl:1.2.840.113556.1.4.803:!=2 subtreescope
All Printers Created In Last 7 Days Select printerName,serverName,location,driverName,uNCName,createTimeStamp from RootDSE where objectClass=printqueue and createTimestamp >= CurrentTimestamp -7 days subtreescope
All Printers Modified In Last 7 Days Select printerName,serverName,location,driverName,uNCName,modifyTimeStamp from RootDSE where objectClass=printqueue and modifyTimestamp >= CurrentTimestamp -7 days subtreescope
Managed Printers Select printerName,serverName,location,driverName,uNCName,managedby,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=printqueue and managedby is not null subtreescope
All Printers Created In Last 30 Days Select printerName,serverName,location,driverName,uNCName,createTimeStamp from RootDSE where objectClass=printqueue and createTimestamp >= CurrentTimestamp -30 days subtreescope
All Printers Modified In Last 30 Days Select printerName,serverName,location,driverName,uNCName,modifyTimeStamp from RootDSE where objectClass=printqueue and modifyTimestamp >= CurrentTimestamp -30 days subtreescope
UnManaged Printers Select printerName,serverName,location,driverName,uNCName,managedby,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=printqueue and managedby is null subtreescope
All Printers Created In Last 60 Days Select printerName,serverName,location,driverName,uNCName,createTimeStamp from RootDSE where objectClass=printqueue and createTimestamp >= CurrentTimestamp -60 days subtreescope
All Printers Modified In Last 60 Days Select printerName,serverName,location,driverName,uNCName,modifyTimeStamp from RootDSE where objectClass=printqueue and modifyTimestamp >= CurrentTimestamp -60 days subtreescope
Recently Deleted Printers Select printerName,serverName,location,driverName,uNCName,createTimeStamp,modifyTimeStamp,isDeleted from RootDSE where objectClass=printqueue and isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope
All Printers Created In Last 90 Days Select printerName,serverName,location,driverName,uNCName,createTimeStamp from RootDSE where objectClass=printqueue and createTimestamp >= CurrentTimestamp -90 days subtreescope
All Printers Modified In Last 90 Days Select printerName,serverName,location,driverName,uNCName,modifyTimeStamp from RootDSE where objectClass=printqueue and modifyTimestamp >= CurrentTimestamp -90 days subtreescope
Mailbox Enabled Users Select sAMAccountName,cn,mailNickname,msExchHomeServerName,proxyAddresses,createTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null subtreescope
Default Sending Size Select sAMAccountName,cn,sn,mailNickname,msExchHomeServerName,submissionContLength,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and submissionContLength is null subtreescope
Outlook Web Access Enabled Users Select sAMAccountName,sn,cn,msExchHomeServerName,mailNickname,protocolsettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*HTTP§1§1* or protocolsettings!=*OWA§0*) subtreescope
Mail Enabled Users Select sAMAccountName,sn,cn,mailNickname,targetAddress from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and targetAddress is not null subtreescope
Restricted Sending Size Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,submissionContLength from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and submissionContLength is not null subtreescope
Outlook Web Access Disabled Users Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,protocolsettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*HTTP§0§1* or protocolsettings=*OWA§0*) subtreescope
Mail Enabled Groups Select sAMAccountName,sn,cn,mail,mailNickname,groupType from RootDSE where objectClass=group and mailNickname is not null subtreescope
Default Recipient Size Select sAMAccountName,mailNickname,msExchHomeServerName,msExchRecipLimit from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and msExchRecipLimit is null subtreescope
POP3 Enabled Users Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,protocolsettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*POP3§1*) subtreescope
Users with Email Proxy Enabled Select sAMAccountName,sn,cn,mailNickname,proxyAddresses from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and proxyAddresses is not null subtreescope
Restricted recipient size Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,msExchRecipLimit from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and msExchRecipLimit is not null subtreescope
POP3 Disabled Users Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,protocolsettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*POP3§0*) subtreescope
Users with Email Proxy Disabled Select sAMAccountName,sn,cn,mailNickname,proxyAddresses from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and proxyAddresses is null subtreescope
Default Receiving size Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,delivContLength from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and delivContLength is null subtreescope
IMAP4 Enabled Users Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,protocolsettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*IMAP4§1*) subtreescope
Restricted Receiving size Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,delivContLength from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and delivContLength is not null subtreescope
IMAP4 Disabled Users Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,protocolsettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*IMAP4§0*) subtreescope
Accept Messages from Everyone Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,homeMDB,targetAddress,authOrig,unauthOrig from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and (homeMDB is not null or msExchHomeServerName is not null or targetAddress is not null) and authOrig is null and unauthOrig is null subtreescope
Default storage limit Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,mDBUseDefaults from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and mDBUseDefaults=TRUE subtreescope
Accept Messages Restricted Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,homeMDB,targetAddress,authOrig from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and (homeMDB is not null or msExchHomeServerName is not null or targetAddress is not null) and (authOrig is not null or unauthOrig is not null) subtreescope
Mailbox size limits Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,mDBUseDefaults from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and mDBUseDefaults=FALSE subtreescope
Hidden from exchange address lists Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,msExchHideFromAddressLists from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and msExchHideFromAddressLists=TRUE subtreescope
Unhidden from exchange address lists Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,msExchHideFromAddressLists from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and (msExchHideFromAddressLists=FALSE or msExchHideFromAddressLists is null) subtreescope
Mail is forwarded to another Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,altRecipient from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and altRecipient is not null subtreescope
All Organizational Units Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit subtreescope
All OU's Modified Today Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope
All OU's Created Today Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope
All OU's Modified Yesterday Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope
All OU's Created Yesterday Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope
All OU's Modified In Last 7 Days Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and modifyTimestamp >= CurrentTimestamp -7 days subtreescope
All OU's Created In Last 7 Days Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and createTimestamp >= CurrentTimestamp -7 days subtreescope
All OU's Modified In Last 30 Days Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and modifyTimestamp >= CurrentTimestamp -30 days subtreescope
All OU's Created In Last 30 Days Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and createTimestamp >= CurrentTimestamp -30 days subtreescope
All OU's Modified In Last 60 Days Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and modifyTimestamp >= CurrentTimestamp -60 days subtreescope
All OU's Created In Last 60 Days Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and createTimestamp >= CurrentTimestamp -60 days subtreescope
All OU's Modified In Last 90 Days Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and modifyTimestamp >= CurrentTimestamp -90 days subtreescope
All OU's Created In Last 90 Days Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and createTimestamp >= CurrentTimestamp -90 days subtreescope
All GPOs Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer subtreescope
All GPOs Modified Today Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope
All GPOs Created Today Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope
All Deleted GPOs Select cn,name,displayName,createTimeStamp,modifyTimeStamp,isDeleted from RootDSE where objectClass=groupPolicyContainer and isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope
All GPOs Modified Yesterday Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope
All GPOs Created Yesterday Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope
All Disabled GPOs Select cn,name,displayName,createTimeStamp,modifyTimeStamp,flags from RootDSE where objectClass=groupPolicyContainer and flags=3 subtreescope
All GPOs Modified In Last 7 Days Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp >= CurrentTimestamp -7 days subtreescope
All GPOs Created In Last 7 Days Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and createTimestamp >= CurrentTimestamp -7 days subtreescope
User Settings Disabled GPOs Select cn,name,displayName,createTimeStamp,modifyTimeStamp,flags from RootDSE where objectClass=groupPolicyContainer and (flags=3 or flags=1) subtreescope
All GPOs Modified In Last 30 Days Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp >= CurrentTimestamp -30 days subtreescope
All GPOs Created In Last 30 Days Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and createTimestamp >= CurrentTimestamp -30 days subtreescope
All GPOs Modified In Last 60 Days Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp >= CurrentTimestamp -60 days subtreescope
All GPOs Created In Last 60 Days Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and createTimestamp >= CurrentTimestamp -60 days subtreescope
All GPOs Modified In Last 90 Days Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp >= CurrentTimestamp -90 days subtreescope
All GPOs Created In Last 90 Days Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and createTimestamp >= CurrentTimestamp -90 days subtreescope

Download All In Zip Format