Audit Exports |
Home | Contact Us | Purchase | Upgrade Center |
To generate these reports, please download AD Admin & Reporting Tool or LDAP Plus AD Help Desk Professional Tool, connect to active directory and select PDF or Excel Export from Audit Exports main menu and select the reports or select all. These are non-customizable reports. Customizable reports are available through Reports Menu
These sample reports are generated from our test active directory server so many reports are empty but columns inside the reports will give you some insight into how the reports are generated.
PDF REPORTS:
| Reports | Generated Using |
|---|---|
 All Objects |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE subtreescope |
| All Objects Created Today |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope |
| All Objects Modified Today |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where modifyTimeStamp <= CurrentEndofDay and modifyTimeStamp >=CurrentStartofDay subtreescope |
| Recently Deleted Objects |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope |
| All Objects Created Yesterday |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope |
| All Objects Modified Yesterday |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where modifyTimeStamp <= CurrentEndofDay -1 days and modifyTimeStamp >=CurrentStartofDay -1 days subtreescope |
| All Objects Created in Last 7 Days |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where createTimestamp >= CurrentTimestamp -7 days subtreescope |
| All Objects Modified in Last 7 Days |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where modifyTimeStamp >= CurrentTimestamp -7 days subtreescope |
| All Objects Created in Last 30 Days |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where createTimestamp >= CurrentTimestamp -30 days subtreescope |
| All Objects Modified in Last 30 Days |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where modifyTimeStamp >= CurrentTimestamp -30 days subtreescope |
| All Objects Created in Last 60 Days |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where createTimestamp >= CurrentTimestamp -60 days subtreescope |
| All Objects Modified in Last 60 Days |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where modifyTimeStamp >= CurrentTimestamp -60 days subtreescope |
| All Objects Created in Last 90 Days |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where createTimestamp >= CurrentTimestamp -90 days subtreescope |
| All Objects Modified in Last 90 Days |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where modifyTimeStamp >= CurrentTimestamp -90 days subtreescope |
| All Users |
Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 subtreescope |
| All Users Who Never Logged On |
Select sAMAccountName,cn,sn,lastlogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lastlogon=0 subtreescope |
| Password Never Expire |
Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and userAccountControl:1.2.840.113556.1.4.803:=65536 subtreescope |
| Disabled Users |
Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and userAccountControl:1.2.840.113556.1.4.803:=2 subtreescope |
| All Users Who Logged On Today |
Select sAMAccountName,cn,sn,lastlogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lastlogon <= CurrentEndofDay and lastlogon >=CurrentStartofDay subtreescope |
| Password Always Expire |
Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and userAccountControl:1.2.840.113556.1.4.803:!=65536 subtreescope |
| Enabled Users |
Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and userAccountControl:1.2.840.113556.1.4.803:!=2 subtreescope |
| All Users Who Logged On Yesterday |
Select sAMAccountName,cn,sn,lastlogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lastlogon <= CurrentEndofDay -1 days and lastlogon >=CurrentStartofDay -1 days subtreescope |
| Password Encrypted Allowed |
Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and userAccountControl:1.2.840.113556.1.4.803:=128 subtreescope |
| Recently Deleted Users |
Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectClass='user' and isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope |
| All Users Who Logged On In Last 7 Days |
Select sAMAccountName,cn,sn,lastlogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lastlogon <= CurrentEndofDay -1 days and lastlogon >=CurrentStartofDay -7 days subtreescope |
| Password Changed In Last 30 Days |
Select sAMAccountName,cn,sn,pwdLastSet from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and pwdLastSet!=0 and pwdLastSet>= CurrentTimestamp -30 days subtreescope |
| Locked Out Users |
Select sAMAccountName,cn,sn,lockoutTime from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lockoutTime>=1 subtreescope |
| All Users Who Logged On In Last 30 Days |
Select sAMAccountName,cn,sn,lastlogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lastlogon <= CurrentEndofDay -1 days and lastlogon >=CurrentStartofDay -30 days subtreescope |
| Password Changed In Last 60 Days |
Select sAMAccountName,cn,sn,pwdLastSet from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and pwdLastSet!=0 and pwdLastSet>= CurrentTimestamp -60 days subtreescope |
| Password Not Changed In Last 30 Days |
Select sAMAccountName,cn,sn,pwdLastSet from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and pwdLastSet!=0 and pwdLastSet<= CurrentTimestamp -30 days subtreescope |
| Password Not Changed In Last 60 Days |
Select sAMAccountName,cn,sn,pwdLastSet from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and pwdLastSet!=0 and pwdLastSet<= CurrentTimestamp -60 days subtreescope |
| All Users And Their Direct Groups |
Select sAMAccountName,memberOf,primaryGroupID from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 subtreescope |
| All Users With Logon Script |
Select sAMAccountName,cn,sn,scriptPath from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and scriptPath is not null subtreescope |
| Password Must Change At Next Logon |
Select sAMAccountName,cn,sn,pwdLastSet from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and pwdLastSet=0 subtreescope |
| All Users And Their Direct And Indirect Groups (Nested) |
Select sAMAccountName,memberOf,primaryGroupID from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 add ldapcontrols('1.2.940.113569') subtreescope |
| All Users Without Logon Script |
Select sAMAccountName,cn,sn,scriptPath from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and scriptPath is null subtreescope |
| Password Bad In Last 7 Days |
Select sAMAccountName,cn,sn,badPasswordTime from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and badPasswordTime>= CurrentTimestamp -7 days subtreescope |
| Password Bad In Last 30 Days |
Select sAMAccountName,cn,sn,badPasswordTime from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and badPasswordTime>= CurrentTimestamp -30 days subtreescope |
| All Users Last Logon |
Select sAMAccountName,cn,sn,lastLogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 add ldapcontrols('1.2.940.113558') subtreescope |
| All Users with Manager |
Select sAMAccountName,cn,sn,manager from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and manager is not null subtreescope |
| All Users Without Manager |
Select sAMAccountName,cn,sn,manager from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and manager is null subtreescope |
| All Users Modified Today |
Select sAMAccountName,cn,sn,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope |
| All Users Modified Yesterday |
Select sAMAccountName,cn,sn,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope |
| Account Expired |
Select sAMAccountName,cn,sn,accountExpires,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and accountExpires!=0 and accountExpires!=9223372036854775807 and accountExpires<= CurrentTimestamp subtreescope |
| All Users Modified In Last 30 Days |
Select sAMAccountName,cn,sn,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp >= CurrentTimestamp -30 days subtreescope |
| Account Never Expires |
Select sAMAccountName,cn,sn,accountExpires from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and (accountExpires=0 or accountExpires=9223372036854775807) subtreescope |
| All Users Created Today |
Select sAMAccountName,cn,sn,accountExpires,createTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope |
| All Users Modified In Last 60 Days |
Select sAMAccountName,cn,sn,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp >= CurrentTimestamp -60 days subtreescope |
| Account Expired In Last 7 Days |
Select sAMAccountName,cn,sn,accountExpires,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and accountExpires!=0 and accountExpires!=9223372036854775807 and accountExpires>= CurrentTimestamp -7 days and accountExpires<= CurrentTimestamp subtreescope |
| All Users Created Yesterday |
Select sAMAccountName,cn,sn,accountExpires,createTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and accountExpires!=0 and accountExpires!=9223372036854775807 and accountExpires>= CurrentTimestamp -7 days and accountExpires<= CurrentTimestamp subtreescope |
| All Users Modified In Last 90 Days |
Select sAMAccountName,cn,sn,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp >= CurrentTimestamp -90 days subtreescope |
| Account Expire In Next 30 Days |
Select sAMAccountName,cn,sn,accountExpires,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and accountExpires!=0 and accountExpires!=9223372036854775807 and accountExpires<= CurrentTimestamp + 30 days and accountExpires>= CurrentTimestamp subtreescope |
| All Users Created In Last 30 Days |
Select sAMAccountName,cn,sn,createTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and createTimestamp >= CurrentTimestamp -30 days subtreescope |
| All Groups |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=top and objectClass=group subtreescope |
| All Group And Their Direct Members |
Select sAMAccountName,member from RootDSE where objectClass=top and objectClass=group subtreescope |
| All Groups Modified Today |
Select sAMAccountName,modifyTimestamp, member from RootDSE where objectClass=top and objectClass=group and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope |
| All Groups With Members |
Select sAMAccountName,member from RootDSE where objectClass=top and objectClass=group and member is not null subtreescope |
| All Groups And Their Direct And Indirect Members (Nested) |
Select sAMAccountName,member from RootDSE where objectClass=top and objectClass=group add ldapcontrols('1.2.940.113568') subtreescope |
| All Groups Modified Yesterday |
Select sAMAccountName,member, modifyTimestamp from RootDSE where objectClass=top and objectClass=group and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope |
| All Groups Without Members |
Select sAMAccountName,member from RootDSE where objectClass=top and objectClass=group and member is null subtreescope |
| All Groups Modified In Last 7 Days |
Select sAMAccountName,member, modifyTimestamp from RootDSE where objectClass=top and objectClass=group and modifyTimestamp >= CurrentTimestamp -7 days subtreescope |
| Managed Groups |
Select sAMAccountName,managedby, member from RootDSE where objectClass=top and objectClass=group and managedby is not null subtreescope |
| All Groups Modified In Last 30 Days |
Select sAMAccountName,member, modifyTimestamp from RootDSE where objectClass=top and objectClass=group and modifyTimestamp >= CurrentTimestamp -30 days subtreescope |
| UnManaged Groups |
Select sAMAccountName,managedby, member from RootDSE where objectClass=top and objectClass=group and managedby is null subtreescope |
| All Groups Member of Other Groups (Direct) |
Select sAMAccountName,memberOf from RootDSE where objectClass=top and objectClass=group subtreescope |
| All Groups Modified In Last 60 Days |
Select sAMAccountName,member, modifyTimestamp from RootDSE where objectClass=top and objectClass=group and modifyTimestamp >= CurrentTimestamp -60 days subtreescope |
| Security Groups |
Select sAMAccountName,member,groupType from RootDSE where objectClass=top and objectClass=group and groupType:1.2.840.113556.1.4.804:=2147483648 subtreescope |
| All Groups Member of Other Groups (Direct And Nested) |
Select sAMAccountName,memberOf from RootDSE where objectClass=top and objectClass=group add ldapcontrols('1.2.940.113569') subtreescope |
| All Groups Modified In Last 90 Days |
Select sAMAccountName,member, modifyTimestamp from RootDSE where objectClass=top and objectClass=group and modifyTimestamp >= CurrentTimestamp -90 days subtreescope |
| Distribution Groups |
Select sAMAccountName,member, groupType from RootDSE where objectClass=top and objectClass=group and (groupType:1.2.840.113556.1.4.804:!=2147483648 or sAMAccountType=268435457) subtreescope |
| Universal Groups |
Select sAMAccountName,member, groupType from RootDSE where groupType:1.2.840.113556.1.4.803:=8 subtreescope |
| Mail Enabled Groups |
Select sAMAccountName,member, mail from RootDSE where objectClass=top and objectClass=group and mail is not null and sAMAccountType!=268435457 subtreescope |
| All Groups Created Today |
Select sAMAccountName,createTimestamp, member from RootDSE where objectClass=top and objectClass=group and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope |
| Recently Deleted Groups |
Select sAMAccountName,createTimestamp, modifyTimestamp, isDeleted from RootDSE where objectClass=top and objectClass=group and isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope |
| All Groups Created Yesterday |
Select sAMAccountName,member, createTimestamp from RootDSE where objectClass=top and objectClass=group and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope |
| All Groups Created In Last 7 Days |
Select sAMAccountName,member, createTimestamp from RootDSE where objectClass=top and objectClass=group and createTimestamp >= CurrentTimestamp -7 days subtreescope |
| All Groups Created In Last 30 Days |
Select sAMAccountName,member, createTimestamp from RootDSE where objectClass=top and objectClass=group and createTimestamp >= CurrentTimestamp -30 days subtreescope |
| All Groups Created In Last 60 Days |
Select sAMAccountName,member, createTimestamp from RootDSE where objectClass=top and objectClass=group and createTimestamp >= CurrentTimestamp -60 days subtreescope |
| All Groups Created In Last 90 Days |
Select sAMAccountName,member, createTimestamp from RootDSE where objectClass=top and objectClass=group and createTimestamp >= CurrentTimestamp -90 days subtreescope |
| All Contacts |
Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=contact subtreescope |
| All Contacts Created Today |
Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=contact and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope |
| All Contacts Modified Today |
Select sAMAccountName,cn,sn,modifyTimeStamp from RootDSE where objectClass=contact and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope |
| Mail Enabled Contacts |
Select sAMAccountName,cn,sn,mailnickname,targetAddress from RootDSE where objectClass=contact and objectClass=person and mailnickname is not null and targetAddress is not null subtreescope |
| All Contacts Created Yesterday |
Select sAMAccountName,cn,sn,createTimestamp from RootDSE where objectClass=contact and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope |
| All Contacts Modified Yesterday |
Select sAMAccountName,cn,sn,modifyTimestamp from RootDSE where objectClass=contact and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope |
| Recently Deleted Contacts |
Select sAMAccountName,isDeleted,createTimestamp,modifyTimestamp from RootDSE where objectClass='contact' and isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope |
| All Contacts Created In Last 7 Days |
Select sAMAccountName,cn,sn,createTimestamp from RootDSE where objectClass=contact and createTimestamp >= CurrentTimestamp -7 days subtreescope |
| All Contacts Modified In Last 7 Days |
Select sAMAccountName,cn,sn,modifyTimestamp from RootDSE where objectClass=contact and modifyTimestamp >= CurrentTimestamp -7 days subtreescope |
| All Contacts Created In Last 30 Days |
Select sAMAccountName,cn,sn,createTimestamp from RootDSE where objectClass=contact and createTimestamp >= CurrentTimestamp -30 days subtreescope |
| All Contacts Modified In Last 30 Days |
Select sAMAccountName,cn,sn,modifyTimestamp from RootDSE where objectClass=contact and modifyTimestamp >= CurrentTimestamp -30 days subtreescope |
| All Contacts Created In Last 60 Days |
Select sAMAccountName,cn,sn,createTimestamp from RootDSE where objectClass=contact and createTimestamp >= CurrentTimestamp -60 days subtreescope |
| All Contacts Modified In Last 60 Days |
Select sAMAccountName,cn,sn,modifyTimestamp from RootDSE where objectClass=contact and modifyTimestamp >= CurrentTimestamp -60 days subtreescope |
| All Contacts Created In Last 90 Days |
Select sAMAccountName,cn,sn,createTimestamp from RootDSE where objectClass=contact and createTimestamp >= CurrentTimestamp -90 days subtreescope |
| All Contacts Modified In Last 90 Days |
Select sAMAccountName,cn,sn,modifyTimestamp from RootDSE where objectClass=contact and modifyTimestamp >= CurrentTimestamp -90 days subtreescope |
| All Computers |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp,modifyTimestamp from RootDSE where objectClass=computer subtreescope |
| All Computers Created Today |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp from RootDSE where objectClass=computer and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope |
| Windows Vista |
Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Vista% subtreescope |
| Disabled Computers |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,userAccountControl from RootDSE where objectClass=computer and userAccountControl:1.2.840.113556.1.4.803:=2 subtreescope |
| All Computers Created Yesterday |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp from RootDSE where objectClass=computer and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope |
| Windows XP |
Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows XP% subtreescope |
| Enabled Computers |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,userAccountControl from RootDSE where objectClass=computer and userAccountControl:1.2.840.113556.1.4.803:!=2 subtreescope |
| All Computers Created In Last 7 Days |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp from RootDSE where objectClass=computer and createTimestamp >= CurrentTimestamp -7 days subtreescope |
| Windows Server 2003 |
Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Server 2003% subtreescope |
| Managed Computers |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,managedby from RootDSE where objectClass=computer and managedby is not null subtreescope |
| All Computers Created In Last 30 Days |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp from RootDSE where objectClass=computer and createTimestamp >= CurrentTimestamp -30 days subtreescope |
| Window 2000 Server |
Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Server 2000% subtreescope |
| UnManaged Computers |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,managedby from RootDSE where objectClass=computer and managedby is null subtreescope |
| All Computers Created In Last 60 Days |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp from RootDSE where objectClass=computer and createTimestamp >= CurrentTimestamp -60 days subtreescope |
| Windows 2008 Server |
Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Server 2008% subtreescope |
| Recently Deleted Computers |
Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass='computer' and isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope |
| All Computers Created In Last 90 Days |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp from RootDSE where objectClass=computer and createTimestamp >= CurrentTimestamp -90 days subtreescope |
| Windows 7 |
Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows 7% subtreescope |
| Non Windows OS |
Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem !=Win* subtreescope |
| All Computers Modified Today |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,modifyTimestamp from RootDSE where objectClass=computer and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope |
| All Computers Modified Yesterday |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,modifyTimestamp from RootDSE where objectClass=computer and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope |
| All Computers Modified In Last 7 Days |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,modifyTimestamp from RootDSE where objectClass=computer and modifyTimestamp >= CurrentTimestamp -7 days subtreescope |
| All Computers Modified In Last 30 Days |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,modifyTimestamp from RootDSE where objectClass=computer and modifyTimestamp >= CurrentTimestamp -30 days subtreescope |
| All Computers Modified In Last 60 Days |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,modifyTimestamp from RootDSE where objectClass=computer and modifyTimestamp >= CurrentTimestamp -60 days subtreescope |
| All Computers Modified In Last 90 Days |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,modifyTimestamp from RootDSE where objectClass=computer and modifyTimestamp >= CurrentTimestamp -90 days subtreescope |
| All Printers |
Select printerName,serverName,location,driverName,uNCName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=printqueue subtreescope |
| All Printers Created Today |
Select printerName,serverName,location,driverName,uNCName,createTimeStamp from RootDSE where objectClass=printqueue and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope |
| All Printers Modified Today |
Select printerName,serverName,location,driverName,uNCName,modifyTimeStamp from RootDSE where objectClass=printqueue and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope |
| Disabled Printers |
Select printerName,serverName,location,driverName,uNCName,createTimeStamp,modifyTimeStamp,userAccountControl from RootDSE where objectClass=printqueue and userAccountControl:1.2.840.113556.1.4.803:=2 subtreescope |
| All Printers Created Yesterday |
Select printerName,serverName,location,driverName,uNCName,createTimeStamp from RootDSE where objectClass=printqueue and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope |
| All Printers Modified Yesterday |
Select printerName,serverName,location,driverName,uNCName,modifyTimeStamp from RootDSE where objectClass=printqueue and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope |
| Enabled Printers |
Select printerName,serverName,location,driverName,uNCName,createTimeStamp,modifyTimeStamp,userAccountControl from RootDSE where objectClass=printqueue and userAccountControl:1.2.840.113556.1.4.803:!=2 subtreescope |
| All Printers Created In Last 7 Days |
Select printerName,serverName,location,driverName,uNCName,createTimeStamp from RootDSE where objectClass=printqueue and createTimestamp >= CurrentTimestamp -7 days subtreescope |
| All Printers Modified In Last 7 Days |
Select printerName,serverName,location,driverName,uNCName,modifyTimeStamp from RootDSE where objectClass=printqueue and modifyTimestamp >= CurrentTimestamp -7 days subtreescope |
| Managed Printers |
Select printerName,serverName,location,driverName,uNCName,managedby,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=printqueue and managedby is not null subtreescope |
| All Printers Created In Last 30 Days |
Select printerName,serverName,location,driverName,uNCName,createTimeStamp from RootDSE where objectClass=printqueue and createTimestamp >= CurrentTimestamp -30 days subtreescope |
| All Printers Modified In Last 30 Days |
Select printerName,serverName,location,driverName,uNCName,modifyTimeStamp from RootDSE where objectClass=printqueue and modifyTimestamp >= CurrentTimestamp -30 days subtreescope |
| UnManaged Printers |
Select printerName,serverName,location,driverName,uNCName,managedby,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=printqueue and managedby is null subtreescope |
| All Printers Created In Last 60 Days |
Select printerName,serverName,location,driverName,uNCName,createTimeStamp from RootDSE where objectClass=printqueue and createTimestamp >= CurrentTimestamp -60 days subtreescope |
| All Printers Modified In Last 60 Days |
Select printerName,serverName,location,driverName,uNCName,modifyTimeStamp from RootDSE where objectClass=printqueue and modifyTimestamp >= CurrentTimestamp -60 days subtreescope |
| Recently Deleted Printers |
Select printerName,serverName,location,driverName,uNCName,createTimeStamp,modifyTimeStamp,isDeleted from RootDSE where objectClass=printqueue and isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope |
| All Printers Created In Last 90 Days |
Select printerName,serverName,location,driverName,uNCName,createTimeStamp from RootDSE where objectClass=printqueue and createTimestamp >= CurrentTimestamp -90 days subtreescope |
| All Printers Modified In Last 90 Days |
Select printerName,serverName,location,driverName,uNCName,modifyTimeStamp from RootDSE where objectClass=printqueue and modifyTimestamp >= CurrentTimestamp -90 days subtreescope |
| Mailbox Enabled Users |
Select sAMAccountName,cn,mailNickname,msExchHomeServerName,proxyAddresses,createTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null subtreescope |
| Default Sending Size |
Select sAMAccountName,cn,sn,mailNickname,msExchHomeServerName,submissionContLength,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and submissionContLength is null subtreescope |
| Outlook Web Access Enabled Users |
Select sAMAccountName,sn,cn,msExchHomeServerName,mailNickname,protocolsettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*HTTP§1§1* or protocolsettings!=*OWA§0*) subtreescope |
| Mail Enabled Users |
Select sAMAccountName,sn,cn,mailNickname,targetAddress from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and targetAddress is not null subtreescope |
| Restricted Sending Size |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,submissionContLength from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and submissionContLength is not null subtreescope |
| Outlook Web Access Disabled Users |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,protocolsettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*HTTP§0§1* or protocolsettings=*OWA§0*) subtreescope |
| Mail Enabled Groups |
Select sAMAccountName,sn,cn,mail,mailNickname,groupType from RootDSE where objectClass=group and mailNickname is not null subtreescope |
| Default Recipient Size |
Select sAMAccountName,mailNickname,msExchHomeServerName,msExchRecipLimit from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and msExchRecipLimit is null subtreescope |
| POP3 Enabled Users |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,protocolsettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*POP3§1*) subtreescope |
| Users with Email Proxy Enabled |
Select sAMAccountName,sn,cn,mailNickname,proxyAddresses from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and proxyAddresses is not null subtreescope |
| Restricted recipient size |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,msExchRecipLimit from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and msExchRecipLimit is not null subtreescope |
| POP3 Disabled Users |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,protocolsettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*POP3§0*) subtreescope |
| Users with Email Proxy Disabled |
Select sAMAccountName,sn,cn,mailNickname,proxyAddresses from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and proxyAddresses is null subtreescope |
| Default Receiving size |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,delivContLength from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and delivContLength is null subtreescope |
| IMAP4 Enabled Users |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,protocolsettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*IMAP4§1*) subtreescope |
| Restricted Receiving size |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,delivContLength from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and delivContLength is not null subtreescope |
| IMAP4 Disabled Users |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,protocolsettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*IMAP4§0*) subtreescope |
| Accept Messages from Everyone |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,homeMDB,targetAddress,authOrig,unauthOrig from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and (homeMDB is not null or msExchHomeServerName is not null or targetAddress is not null) and authOrig is null and unauthOrig is null subtreescope |
| Default storage limit |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,mDBUseDefaults from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and mDBUseDefaults=TRUE subtreescope |
| Accept Messages Restricted |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,homeMDB,targetAddress,authOrig from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and (homeMDB is not null or msExchHomeServerName is not null or targetAddress is not null) and (authOrig is not null or unauthOrig is not null) subtreescope |
| Mailbox size limits |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,mDBUseDefaults from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and mDBUseDefaults=FALSE subtreescope |
| Hidden from exchange address lists |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,msExchHideFromAddressLists from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and msExchHideFromAddressLists=TRUE subtreescope |
| Unhidden from exchange address lists |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,msExchHideFromAddressLists from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and (msExchHideFromAddressLists=FALSE or msExchHideFromAddressLists is null) subtreescope |
| Mail is forwarded to another |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,altRecipient from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and altRecipient is not null subtreescope |
| All Organizational Units |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit subtreescope |
| All OU's Modified Today |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope |
| All OU's Created Today |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope |
| All OU's Modified Yesterday |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope |
| All OU's Created Yesterday |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope |
| All OU's Modified In Last 7 Days |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and modifyTimestamp >= CurrentTimestamp -7 days subtreescope |
| All OU's Created In Last 7 Days |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and createTimestamp >= CurrentTimestamp -7 days subtreescope |
| All OU's Modified In Last 30 Days |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and modifyTimestamp >= CurrentTimestamp -30 days subtreescope |
| All OU's Created In Last 30 Days |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and createTimestamp >= CurrentTimestamp -30 days subtreescope |
| All OU's Modified In Last 60 Days |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and modifyTimestamp >= CurrentTimestamp -60 days subtreescope |
| All OU's Created In Last 60 Days |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and createTimestamp >= CurrentTimestamp -60 days subtreescope |
| All OU's Modified In Last 90 Days |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and modifyTimestamp >= CurrentTimestamp -90 days subtreescope |
| All OU's Created In Last 90 Days |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and createTimestamp >= CurrentTimestamp -90 days subtreescope |
| All GPOs |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer subtreescope |
| All GPOs Modified Today |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope |
| All GPOs Created Today |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope |
| All Deleted GPOs |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp,isDeleted from RootDSE where objectClass=groupPolicyContainer and isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope |
| All GPOs Modified Yesterday |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope |
| All GPOs Created Yesterday |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope |
| All Disabled GPOs |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp,flags from RootDSE where objectClass=groupPolicyContainer and flags=3 subtreescope |
| All GPOs Modified In Last 7 Days |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp >= CurrentTimestamp -7 days subtreescope |
| All GPOs Created In Last 7 Days |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and createTimestamp >= CurrentTimestamp -7 days subtreescope |
| User Settings Disabled GPOs |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp,flags from RootDSE where objectClass=groupPolicyContainer and (flags=3 or flags=1) subtreescope |
| All GPOs Modified In Last 30 Days |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp >= CurrentTimestamp -30 days subtreescope |
| All GPOs Created In Last 30 Days |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and createTimestamp >= CurrentTimestamp -30 days subtreescope |
| All GPOs Modified In Last 60 Days |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp >= CurrentTimestamp -60 days subtreescope |
| All GPOs Created In Last 60 Days |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and createTimestamp >= CurrentTimestamp -60 days subtreescope |
| All GPOs Modified In Last 90 Days |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp >= CurrentTimestamp -90 days subtreescope |
| All GPOs Created In Last 90 Days |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and createTimestamp >= CurrentTimestamp -90 days subtreescope |
EXCEL REPORTS
| Reports | Generated Using |
|---|---|
 All Objects |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE subtreescope |
| All Objects Created Today |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope |
| All Objects Modified Today |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where modifyTimeStamp <= CurrentEndofDay and modifyTimeStamp >=CurrentStartofDay subtreescope |
| Recently Deleted Objects |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope |
| All Objects Created Yesterday |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope |
| All Objects Modified Yesterday |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where modifyTimeStamp <= CurrentEndofDay -1 days and modifyTimeStamp >=CurrentStartofDay -1 days subtreescope |
| All Objects Created in Last 7 Days |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where createTimestamp >= CurrentTimestamp -7 days subtreescope |
| All Objects Modified in Last 7 Days |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where modifyTimeStamp >= CurrentTimestamp -7 days subtreescope |
| All Objects Created in Last 30 Days |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where createTimestamp >= CurrentTimestamp -30 days subtreescope |
| All Objects Modified in Last 30 Days |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where modifyTimeStamp >= CurrentTimestamp -30 days subtreescope |
| All Objects Created in Last 60 Days |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where createTimestamp >= CurrentTimestamp -60 days subtreescope |
| All Objects Modified in Last 60 Days |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where modifyTimeStamp >= CurrentTimestamp -60 days subtreescope |
| All Objects Created in Last 90 Days |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where createTimestamp >= CurrentTimestamp -90 days subtreescope |
| All Objects Modified in Last 90 Days |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where modifyTimeStamp >= CurrentTimestamp -90 days subtreescope |
| All Users |
Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 subtreescope |
| All Users Who Never Logged On |
Select sAMAccountName,cn,sn,lastlogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lastlogon=0 subtreescope |
| Password Never Expire |
Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and userAccountControl:1.2.840.113556.1.4.803:=65536 subtreescope |
| Disabled Users |
Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and userAccountControl:1.2.840.113556.1.4.803:=2 subtreescope |
| All Users Who Logged On Today |
Select sAMAccountName,cn,sn,lastlogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lastlogon <= CurrentEndofDay and lastlogon >=CurrentStartofDay subtreescope |
| Password Always Expire |
Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and userAccountControl:1.2.840.113556.1.4.803:!=65536 subtreescope |
| Enabled Users |
Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and userAccountControl:1.2.840.113556.1.4.803:!=2 subtreescope |
| All Users Who Logged On Yesterday |
Select sAMAccountName,cn,sn,lastlogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lastlogon <= CurrentEndofDay -1 days and lastlogon >=CurrentStartofDay -1 days subtreescope |
| Password Encrypted Allowed |
Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and userAccountControl:1.2.840.113556.1.4.803:=128 subtreescope |
| Recently Deleted Users |
Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectClass='user' and isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope |
| All Users Who Logged On In Last 7 Days |
Select sAMAccountName,cn,sn,lastlogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lastlogon <= CurrentEndofDay -1 days and lastlogon >=CurrentStartofDay -7 days subtreescope |
| Password Changed In Last 30 Days |
Select sAMAccountName,cn,sn,pwdLastSet from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and pwdLastSet!=0 and pwdLastSet>= CurrentTimestamp -30 days subtreescope |
| Locked Out Users |
Select sAMAccountName,cn,sn,lockoutTime from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lockoutTime>=1 subtreescope |
| All Users Who Logged On In Last 30 Days |
Select sAMAccountName,cn,sn,lastlogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and lastlogon <= CurrentEndofDay -1 days and lastlogon >=CurrentStartofDay -30 days subtreescope |
| Password Changed In Last 60 Days |
Select sAMAccountName,cn,sn,pwdLastSet from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and pwdLastSet!=0 and pwdLastSet>= CurrentTimestamp -60 days subtreescope |
| Password Not Changed In Last 30 Days |
Select sAMAccountName,cn,sn,pwdLastSet from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and pwdLastSet!=0 and pwdLastSet<= CurrentTimestamp -30 days subtreescope |
| Password Not Changed In Last 60 Days |
Select sAMAccountName,cn,sn,pwdLastSet from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and pwdLastSet!=0 and pwdLastSet<= CurrentTimestamp -60 days subtreescope |
| All Users And Their Direct Groups |
Select sAMAccountName,memberOf,primaryGroupID from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 subtreescope |
| All Users With Logon Script |
Select sAMAccountName,cn,sn,scriptPath from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and scriptPath is not null subtreescope |
| Password Must Change At Next Logon |
Select sAMAccountName,cn,sn,pwdLastSet from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and pwdLastSet=0 subtreescope |
| All Users And Their Direct And Indirect Groups (Nested) |
Select sAMAccountName,memberOf,primaryGroupID from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 add ldapcontrols('1.2.940.113569') subtreescope |
| All Users Without Logon Script |
Select sAMAccountName,cn,sn,scriptPath from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and scriptPath is null subtreescope |
| Password Bad In Last 7 Days |
Select sAMAccountName,cn,sn,badPasswordTime from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and badPasswordTime>= CurrentTimestamp -7 days subtreescope |
| Password Bad In Last 30 Days |
Select sAMAccountName,cn,sn,badPasswordTime from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and badPasswordTime>= CurrentTimestamp -30 days subtreescope |
| All Users Last Logon |
Select sAMAccountName,cn,sn,lastLogon from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 add ldapcontrols('1.2.940.113558') subtreescope |
| All Users with Manager |
Select sAMAccountName,cn,sn,manager from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and manager is not null subtreescope |
| All Users Without Manager |
Select sAMAccountName,cn,sn,manager from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and manager is null subtreescope |
| All Users Modified Today |
Select sAMAccountName,cn,sn,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope |
| All Users Modified Yesterday |
Select sAMAccountName,cn,sn,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope |
| Account Expired |
Select sAMAccountName,cn,sn,accountExpires,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and accountExpires!=0 and accountExpires!=9223372036854775807 and accountExpires<= CurrentTimestamp subtreescope |
| All Users Modified In Last 30 Days |
Select sAMAccountName,cn,sn,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp >= CurrentTimestamp -30 days subtreescope |
| Account Never Expires |
Select sAMAccountName,cn,sn,accountExpires from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and (accountExpires=0 or accountExpires=9223372036854775807) subtreescope |
| All Users Created Today |
Select sAMAccountName,cn,sn,accountExpires,createTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope |
| All Users Modified In Last 60 Days |
Select sAMAccountName,cn,sn,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp >= CurrentTimestamp -60 days subtreescope |
| Account Expired In Last 7 Days |
Select sAMAccountName,cn,sn,accountExpires,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and accountExpires!=0 and accountExpires!=9223372036854775807 and accountExpires>= CurrentTimestamp -7 days and accountExpires<= CurrentTimestamp subtreescope |
| All Users Created Yesterday |
Select sAMAccountName,cn,sn,accountExpires,createTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and accountExpires!=0 and accountExpires!=9223372036854775807 and accountExpires>= CurrentTimestamp -7 days and accountExpires<= CurrentTimestamp subtreescope |
| All Users Modified In Last 90 Days |
Select sAMAccountName,cn,sn,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and modifyTimestamp >= CurrentTimestamp -90 days subtreescope |
| Account Expire In Next 30 Days |
Select sAMAccountName,cn,sn,accountExpires,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and accountExpires!=0 and accountExpires!=9223372036854775807 and accountExpires<= CurrentTimestamp + 30 days and accountExpires>= CurrentTimestamp subtreescope |
| All Users Created In Last 30 Days |
Select sAMAccountName,cn,sn,createTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and createTimestamp >= CurrentTimestamp -30 days subtreescope |
| All Groups |
Select sAMAccountName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=top and objectClass=group subtreescope |
| All Group And Their Direct Members |
Select sAMAccountName,member from RootDSE where objectClass=top and objectClass=group subtreescope |
| All Groups Modified Today |
Select sAMAccountName,modifyTimestamp, member from RootDSE where objectClass=top and objectClass=group and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope |
| All Groups With Members |
Select sAMAccountName,member from RootDSE where objectClass=top and objectClass=group and member is not null subtreescope |
| All Groups And Their Direct And Indirect Members (Nested) |
Select sAMAccountName,member from RootDSE where objectClass=top and objectClass=group add ldapcontrols('1.2.940.113568') subtreescope |
| All Groups Modified Yesterday |
Select sAMAccountName,member, modifyTimestamp from RootDSE where objectClass=top and objectClass=group and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope |
| All Groups Without Members |
Select sAMAccountName,member from RootDSE where objectClass=top and objectClass=group and member is null subtreescope |
| All Groups Modified In Last 7 Days |
Select sAMAccountName,member, modifyTimestamp from RootDSE where objectClass=top and objectClass=group and modifyTimestamp >= CurrentTimestamp -7 days subtreescope |
| Managed Groups |
Select sAMAccountName,managedby, member from RootDSE where objectClass=top and objectClass=group and managedby is not null subtreescope |
| All Groups Modified In Last 30 Days |
Select sAMAccountName,member, modifyTimestamp from RootDSE where objectClass=top and objectClass=group and modifyTimestamp >= CurrentTimestamp -30 days subtreescope |
| UnManaged Groups |
Select sAMAccountName,managedby, member from RootDSE where objectClass=top and objectClass=group and managedby is null subtreescope |
| All Groups Member of Other Groups (Direct) |
Select sAMAccountName,memberOf from RootDSE where objectClass=top and objectClass=group subtreescope |
| All Groups Modified In Last 60 Days |
Select sAMAccountName,member, modifyTimestamp from RootDSE where objectClass=top and objectClass=group and modifyTimestamp >= CurrentTimestamp -60 days subtreescope |
| Security Groups |
Select sAMAccountName,member,groupType from RootDSE where objectClass=top and objectClass=group and groupType:1.2.840.113556.1.4.804:=2147483648 subtreescope |
| All Groups Member of Other Groups (Direct And Nested) |
Select sAMAccountName,memberOf from RootDSE where objectClass=top and objectClass=group add ldapcontrols('1.2.940.113569') subtreescope |
| All Groups Modified In Last 90 Days |
Select sAMAccountName,member, modifyTimestamp from RootDSE where objectClass=top and objectClass=group and modifyTimestamp >= CurrentTimestamp -90 days subtreescope |
| Distribution Groups |
Select sAMAccountName,member, groupType from RootDSE where objectClass=top and objectClass=group and (groupType:1.2.840.113556.1.4.804:!=2147483648 or sAMAccountType=268435457) subtreescope |
| Universal Groups |
Select sAMAccountName,member, groupType from RootDSE where groupType:1.2.840.113556.1.4.803:=8 subtreescope |
| Mail Enabled Groups |
Select sAMAccountName,member, mail from RootDSE where objectClass=top and objectClass=group and mail is not null and sAMAccountType!=268435457 subtreescope |
| All Groups Created Today |
Select sAMAccountName,createTimestamp, member from RootDSE where objectClass=top and objectClass=group and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope |
| Recently Deleted Groups |
Select sAMAccountName,createTimestamp, modifyTimestamp, isDeleted from RootDSE where objectClass=top and objectClass=group and isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope |
| All Groups Created Yesterday |
Select sAMAccountName,member, createTimestamp from RootDSE where objectClass=top and objectClass=group and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope |
| All Groups Created In Last 7 Days |
Select sAMAccountName,member, createTimestamp from RootDSE where objectClass=top and objectClass=group and createTimestamp >= CurrentTimestamp -7 days subtreescope |
| All Groups Created In Last 30 Days |
Select sAMAccountName,member, createTimestamp from RootDSE where objectClass=top and objectClass=group and createTimestamp >= CurrentTimestamp -30 days subtreescope |
| All Groups Created In Last 60 Days |
Select sAMAccountName,member, createTimestamp from RootDSE where objectClass=top and objectClass=group and createTimestamp >= CurrentTimestamp -60 days subtreescope |
| All Groups Created In Last 90 Days |
Select sAMAccountName,member, createTimestamp from RootDSE where objectClass=top and objectClass=group and createTimestamp >= CurrentTimestamp -90 days subtreescope |
| All Contacts |
Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=contact subtreescope |
| All Contacts Created Today |
Select sAMAccountName,cn,sn,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=contact and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope |
| All Contacts Modified Today |
Select sAMAccountName,cn,sn,modifyTimeStamp from RootDSE where objectClass=contact and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope |
| Mail Enabled Contacts |
Select sAMAccountName,cn,sn,mailnickname,targetAddress from RootDSE where objectClass=contact and objectClass=person and mailnickname is not null and targetAddress is not null subtreescope |
| All Contacts Created Yesterday |
Select sAMAccountName,cn,sn,createTimestamp from RootDSE where objectClass=contact and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope |
| All Contacts Modified Yesterday |
Select sAMAccountName,cn,sn,modifyTimestamp from RootDSE where objectClass=contact and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope |
| Recently Deleted Contacts |
Select sAMAccountName,isDeleted,createTimestamp,modifyTimestamp from RootDSE where objectClass='contact' and isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope |
| All Contacts Created In Last 7 Days |
Select sAMAccountName,cn,sn,createTimestamp from RootDSE where objectClass=contact and createTimestamp >= CurrentTimestamp -7 days subtreescope |
| All Contacts Modified In Last 7 Days |
Select sAMAccountName,cn,sn,modifyTimestamp from RootDSE where objectClass=contact and modifyTimestamp >= CurrentTimestamp -7 days subtreescope |
| All Contacts Created In Last 30 Days |
Select sAMAccountName,cn,sn,createTimestamp from RootDSE where objectClass=contact and createTimestamp >= CurrentTimestamp -30 days subtreescope |
| All Contacts Modified In Last 30 Days |
Select sAMAccountName,cn,sn,modifyTimestamp from RootDSE where objectClass=contact and modifyTimestamp >= CurrentTimestamp -30 days subtreescope |
| All Contacts Created In Last 60 Days |
Select sAMAccountName,cn,sn,createTimestamp from RootDSE where objectClass=contact and createTimestamp >= CurrentTimestamp -60 days subtreescope |
| All Contacts Modified In Last 60 Days |
Select sAMAccountName,cn,sn,modifyTimestamp from RootDSE where objectClass=contact and modifyTimestamp >= CurrentTimestamp -60 days subtreescope |
| All Contacts Created In Last 90 Days |
Select sAMAccountName,cn,sn,createTimestamp from RootDSE where objectClass=contact and createTimestamp >= CurrentTimestamp -90 days subtreescope |
| All Contacts Modified In Last 90 Days |
Select sAMAccountName,cn,sn,modifyTimestamp from RootDSE where objectClass=contact and modifyTimestamp >= CurrentTimestamp -90 days subtreescope |
| All Computers |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp,modifyTimestamp from RootDSE where objectClass=computer subtreescope |
| All Computers Created Today |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp from RootDSE where objectClass=computer and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope |
| Windows Vista |
Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Vista% subtreescope |
| Disabled Computers |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,userAccountControl from RootDSE where objectClass=computer and userAccountControl:1.2.840.113556.1.4.803:=2 subtreescope |
| All Computers Created Yesterday |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp from RootDSE where objectClass=computer and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope |
| Windows XP |
Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows XP% subtreescope |
| Enabled Computers |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,userAccountControl from RootDSE where objectClass=computer and userAccountControl:1.2.840.113556.1.4.803:!=2 subtreescope |
| All Computers Created In Last 7 Days |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp from RootDSE where objectClass=computer and createTimestamp >= CurrentTimestamp -7 days subtreescope |
| Windows Server 2003 |
Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Server 2003% subtreescope |
| Managed Computers |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,managedby from RootDSE where objectClass=computer and managedby is not null subtreescope |
| All Computers Created In Last 30 Days |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp from RootDSE where objectClass=computer and createTimestamp >= CurrentTimestamp -30 days subtreescope |
| Window 2000 Server |
Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Server 2000% subtreescope |
| UnManaged Computers |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,managedby from RootDSE where objectClass=computer and managedby is null subtreescope |
| All Computers Created In Last 60 Days |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp from RootDSE where objectClass=computer and createTimestamp >= CurrentTimestamp -60 days subtreescope |
| Windows 2008 Server |
Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows Server 2008% subtreescope |
| Recently Deleted Computers |
Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass='computer' and isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope |
| All Computers Created In Last 90 Days |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,createTimeStamp from RootDSE where objectClass=computer and createTimestamp >= CurrentTimestamp -90 days subtreescope |
| Windows 7 |
Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem like Windows 7% subtreescope |
| Non Windows OS |
Select sAMAccountName,operatingSystem,operatingSystemServicePack from RootDSE where objectClass=computer and operatingSystem !=Win* subtreescope |
| All Computers Modified Today |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,modifyTimestamp from RootDSE where objectClass=computer and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope |
| All Computers Modified Yesterday |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,modifyTimestamp from RootDSE where objectClass=computer and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope |
| All Computers Modified In Last 7 Days |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,modifyTimestamp from RootDSE where objectClass=computer and modifyTimestamp >= CurrentTimestamp -7 days subtreescope |
| All Computers Modified In Last 30 Days |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,modifyTimestamp from RootDSE where objectClass=computer and modifyTimestamp >= CurrentTimestamp -30 days subtreescope |
| All Computers Modified In Last 60 Days |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,modifyTimestamp from RootDSE where objectClass=computer and modifyTimestamp >= CurrentTimestamp -60 days subtreescope |
| All Computers Modified In Last 90 Days |
Select sAMAccountName,operatingSystem,operatingSystemServicePack,modifyTimestamp from RootDSE where objectClass=computer and modifyTimestamp >= CurrentTimestamp -90 days subtreescope |
| All Printers |
Select printerName,serverName,location,driverName,uNCName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=printqueue subtreescope |
| All Printers Created Today |
Select printerName,serverName,location,driverName,uNCName,createTimeStamp from RootDSE where objectClass=printqueue and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope |
| All Printers Modified Today |
Select printerName,serverName,location,driverName,uNCName,modifyTimeStamp from RootDSE where objectClass=printqueue and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope |
| Disabled Printers |
Select printerName,serverName,location,driverName,uNCName,createTimeStamp,modifyTimeStamp,userAccountControl from RootDSE where objectClass=printqueue and userAccountControl:1.2.840.113556.1.4.803:=2 subtreescope |
| All Printers Created Yesterday |
Select printerName,serverName,location,driverName,uNCName,createTimeStamp from RootDSE where objectClass=printqueue and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope |
| All Printers Modified Yesterday |
Select printerName,serverName,location,driverName,uNCName,modifyTimeStamp from RootDSE where objectClass=printqueue and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope |
| Enabled Printers |
Select printerName,serverName,location,driverName,uNCName,createTimeStamp,modifyTimeStamp,userAccountControl from RootDSE where objectClass=printqueue and userAccountControl:1.2.840.113556.1.4.803:!=2 subtreescope |
| All Printers Created In Last 7 Days |
Select printerName,serverName,location,driverName,uNCName,createTimeStamp from RootDSE where objectClass=printqueue and createTimestamp >= CurrentTimestamp -7 days subtreescope |
| All Printers Modified In Last 7 Days |
Select printerName,serverName,location,driverName,uNCName,modifyTimeStamp from RootDSE where objectClass=printqueue and modifyTimestamp >= CurrentTimestamp -7 days subtreescope |
| Managed Printers |
Select printerName,serverName,location,driverName,uNCName,managedby,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=printqueue and managedby is not null subtreescope |
| All Printers Created In Last 30 Days |
Select printerName,serverName,location,driverName,uNCName,createTimeStamp from RootDSE where objectClass=printqueue and createTimestamp >= CurrentTimestamp -30 days subtreescope |
| All Printers Modified In Last 30 Days |
Select printerName,serverName,location,driverName,uNCName,modifyTimeStamp from RootDSE where objectClass=printqueue and modifyTimestamp >= CurrentTimestamp -30 days subtreescope |
| UnManaged Printers |
Select printerName,serverName,location,driverName,uNCName,managedby,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=printqueue and managedby is null subtreescope |
| All Printers Created In Last 60 Days |
Select printerName,serverName,location,driverName,uNCName,createTimeStamp from RootDSE where objectClass=printqueue and createTimestamp >= CurrentTimestamp -60 days subtreescope |
| All Printers Modified In Last 60 Days |
Select printerName,serverName,location,driverName,uNCName,modifyTimeStamp from RootDSE where objectClass=printqueue and modifyTimestamp >= CurrentTimestamp -60 days subtreescope |
| Recently Deleted Printers |
Select printerName,serverName,location,driverName,uNCName,createTimeStamp,modifyTimeStamp,isDeleted from RootDSE where objectClass=printqueue and isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope |
| All Printers Created In Last 90 Days |
Select printerName,serverName,location,driverName,uNCName,createTimeStamp from RootDSE where objectClass=printqueue and createTimestamp >= CurrentTimestamp -90 days subtreescope |
| All Printers Modified In Last 90 Days |
Select printerName,serverName,location,driverName,uNCName,modifyTimeStamp from RootDSE where objectClass=printqueue and modifyTimestamp >= CurrentTimestamp -90 days subtreescope |
| Mailbox Enabled Users |
Select sAMAccountName,cn,mailNickname,msExchHomeServerName,proxyAddresses,createTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null subtreescope |
| Default Sending Size |
Select sAMAccountName,cn,sn,mailNickname,msExchHomeServerName,submissionContLength,createTimeStamp,modifyTimeStamp from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and submissionContLength is null subtreescope |
| Outlook Web Access Enabled Users |
Select sAMAccountName,sn,cn,msExchHomeServerName,mailNickname,protocolsettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*HTTP§1§1* or protocolsettings!=*OWA§0*) subtreescope |
| Mail Enabled Users |
Select sAMAccountName,sn,cn,mailNickname,targetAddress from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and targetAddress is not null subtreescope |
| Restricted Sending Size |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,submissionContLength from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and submissionContLength is not null subtreescope |
| Outlook Web Access Disabled Users |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,protocolsettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*HTTP§0§1* or protocolsettings=*OWA§0*) subtreescope |
| Mail Enabled Groups |
Select sAMAccountName,sn,cn,mail,mailNickname,groupType from RootDSE where objectClass=group and mailNickname is not null subtreescope |
| Default Recipient Size |
Select sAMAccountName,mailNickname,msExchHomeServerName,msExchRecipLimit from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and msExchRecipLimit is null subtreescope |
| POP3 Enabled Users |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,protocolsettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*POP3§1*) subtreescope |
| Users with Email Proxy Enabled |
Select sAMAccountName,sn,cn,mailNickname,proxyAddresses from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and proxyAddresses is not null subtreescope |
| Restricted recipient size |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,msExchRecipLimit from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and msExchRecipLimit is not null subtreescope |
| POP3 Disabled Users |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,protocolsettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*POP3§0*) subtreescope |
| Users with Email Proxy Disabled |
Select sAMAccountName,sn,cn,mailNickname,proxyAddresses from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and proxyAddresses is null subtreescope |
| Default Receiving size |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,delivContLength from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and delivContLength is null subtreescope |
| IMAP4 Enabled Users |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,protocolsettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*IMAP4§1*) subtreescope |
| Restricted Receiving size |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,delivContLength from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and delivContLength is not null subtreescope |
| IMAP4 Disabled Users |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,protocolsettings from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and (protocolsettings=*IMAP4§0*) subtreescope |
| Accept Messages from Everyone |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,homeMDB,targetAddress,authOrig,unauthOrig from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and (homeMDB is not null or msExchHomeServerName is not null or targetAddress is not null) and authOrig is null and unauthOrig is null subtreescope |
| Default storage limit |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,mDBUseDefaults from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and mDBUseDefaults=TRUE subtreescope |
| Accept Messages Restricted |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,homeMDB,targetAddress,authOrig from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and (homeMDB is not null or msExchHomeServerName is not null or targetAddress is not null) and (authOrig is not null or unauthOrig is not null) subtreescope |
| Mailbox size limits |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,mDBUseDefaults from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and mailNickname is not null and msExchHomeServerName is not null and mDBUseDefaults=FALSE subtreescope |
| Hidden from exchange address lists |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,msExchHideFromAddressLists from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and msExchHideFromAddressLists=TRUE subtreescope |
| Unhidden from exchange address lists |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,msExchHideFromAddressLists from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and (msExchHideFromAddressLists=FALSE or msExchHideFromAddressLists is null) subtreescope |
| Mail is forwarded to another |
Select sAMAccountName,sn,cn,mailNickname,msExchHomeServerName,altRecipient from RootDSE where objectCategory='person' and objectClass='user' and sAMAccountType!=805306370 and altRecipient is not null subtreescope |
| All Organizational Units |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit subtreescope |
| All OU's Modified Today |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope |
| All OU's Created Today |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope |
| All OU's Modified Yesterday |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope |
| All OU's Created Yesterday |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope |
| All OU's Modified In Last 7 Days |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and modifyTimestamp >= CurrentTimestamp -7 days subtreescope |
| All OU's Created In Last 7 Days |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and createTimestamp >= CurrentTimestamp -7 days subtreescope |
| All OU's Modified In Last 30 Days |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and modifyTimestamp >= CurrentTimestamp -30 days subtreescope |
| All OU's Created In Last 30 Days |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and createTimestamp >= CurrentTimestamp -30 days subtreescope |
| All OU's Modified In Last 60 Days |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and modifyTimestamp >= CurrentTimestamp -60 days subtreescope |
| All OU's Created In Last 60 Days |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and createTimestamp >= CurrentTimestamp -60 days subtreescope |
| All OU's Modified In Last 90 Days |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and modifyTimestamp >= CurrentTimestamp -90 days subtreescope |
| All OU's Created In Last 90 Days |
Select name,ou,isCriticalSystemObject,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=organizationalUnit and createTimestamp >= CurrentTimestamp -90 days subtreescope |
| All GPOs |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer subtreescope |
| All GPOs Modified Today |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp <= CurrentEndofDay and modifyTimestamp >=CurrentStartofDay subtreescope |
| All GPOs Created Today |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and createTimestamp <= CurrentEndofDay and createTimestamp >=CurrentStartofDay subtreescope |
| All Deleted GPOs |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp,isDeleted from RootDSE where objectClass=groupPolicyContainer and isDeleted=TRUE add ldapcontrols('1.2.840.113556.1.4.417') subtreescope |
| All GPOs Modified Yesterday |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp <= CurrentEndofDay -1 days and modifyTimestamp >=CurrentStartofDay -1 days subtreescope |
| All GPOs Created Yesterday |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and createTimestamp <= CurrentEndofDay -1 days and createTimestamp >=CurrentStartofDay -1 days subtreescope |
| All Disabled GPOs |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp,flags from RootDSE where objectClass=groupPolicyContainer and flags=3 subtreescope |
| All GPOs Modified In Last 7 Days |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp >= CurrentTimestamp -7 days subtreescope |
| All GPOs Created In Last 7 Days |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and createTimestamp >= CurrentTimestamp -7 days subtreescope |
| User Settings Disabled GPOs |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp,flags from RootDSE where objectClass=groupPolicyContainer and (flags=3 or flags=1) subtreescope |
| All GPOs Modified In Last 30 Days |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp >= CurrentTimestamp -30 days subtreescope |
| All GPOs Created In Last 30 Days |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and createTimestamp >= CurrentTimestamp -30 days subtreescope |
| All GPOs Modified In Last 60 Days |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp >= CurrentTimestamp -60 days subtreescope |
| All GPOs Created In Last 60 Days |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and createTimestamp >= CurrentTimestamp -60 days subtreescope |
| All GPOs Modified In Last 90 Days |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and modifyTimestamp >= CurrentTimestamp -90 days subtreescope |
| All GPOs Created In Last 90 Days |
Select cn,name,displayName,createTimeStamp,modifyTimeStamp from RootDSE where objectClass=groupPolicyContainer and createTimestamp >= CurrentTimestamp -90 days subtreescope |