joeware - never stop exploring...

So I did something I always have some amount of trepidation doing… upgraded my web software, in particular I upgraded WordPress. This was needed, there was a security issue in the older version I was using and someone actually poked themselves into it and popped some hidden links into the blog entries. No harm to [...]

My friend Dean was griping about NETDOM a while back and how it wasn’t working for him on something. I was, as I seem to be most of the time now, swamped under water with a reed to breath through so unfortunately I didn’t have much time to chat with him about the problem and [...]

AdFind has been updated and uploaded to the website.
There is one change in there that may piss some people off, I changed the TZ text string on time decode with -utc switch from Coordinated Universal Time to UTC. I realize this may piss some people off, but I personally wanted it. I dump a lot [...]

I have updated the blog server software so if you notice any issues, please let me know!

AdFind has been updated to V01.36.00. For details see
http://www.joeware.net/win/free/tools/adfind.htm
 
AdMod has been updated to V01.10.00. For details see
http://www.joeware.net/win/free/tools/admod.htm

Someone posted info on a bug in the joeware forums about AdMod that I wanted to take care of ASAP so I made the correction as well as a couple of other small changes and have uploaded the new bin.
Changes

Fixed bug in tokenization which could impact many things but primarily argument processing
Allow single user [...]

I have released an update to AdFind. The new version is V01.35.00. The following changes are included:

Fixed bug in -onlydacl
Fixed bug in -sddl for ACL flag output
Added shortcut DomainNCs
Changed output of ACL Flag output for -sddl++
Added -onlydaclflag, -onlysaclflag, -onlyaclflags

I think folks will like the -onlydaclflag switch once they realize how useful it can be. [...]

I forgot to announce an update that occurred to AdMod back on Nov 6. It is a typo fix, new version is V01.08.02.
Also AdFind has been V01.34.00 uploaded this evening. There is a bug fix for a very specific issue with filtered security descriptor CSV output. Also I added the -qlist, -onlysacl, and -onlydacl options. I was [...]

I have uploaded the latest versions of AdFind and AdMod this evening.
AdFind is now at V01.33.00

Changed some docs
Fixed a bug reported to me on the search produced by -sc u
Slight mod to how -decsddlacl works
Added some extra timers for -selapsed
Added more -exterr capability to a couple of error areas that didn’t have it
Added a built [...]

AdFind V01.32.00 is officially released…
You can download it from http://www.joeware.net/win/free/tools/adfind.htm
I have posted several glimpses into what this version can do here on the blog, here are the changes:

Fixed bug in -adcsv, added more data to -adcsv header
Fixed bug in -noctl
Fixed bug in SDDL SID Decode
Added subnets and exch to DN Replace option
Added [...]

AdMod V01.07.00 is officially released…
You can download it from http://www.joeware.net/win/free/tools/admod.htm
As with AdFind, I have posted several glimpses into what this version can do here on the blog. Note that a couple of the previous usage scenarios were modified based on some usage feedback which should help make some things a little less confusing. Please read the [...]

One popular request I have received over the years for AdFind was to decode the Generalized Time fields like I decode some of the common int8 (64 bit) time fields. I have always said no to this because I don’t consider the fields encoded so not in need of decoding… I see something like
>whenCreated: 20021023015020.0Z>whenChanged: [...]

I sent out the second beta for AdMod yesterday afternoon, I am expecting to release it to the general public within a week. The beta testers have not reported back any issues other than the general comments of the usage/help is huge… Note that is light help too, the tool now will do so much and [...]

In my testing I realized that the power to quickly create a bunch of test users or test groups was cool but was a lot to type… Unfortunately there is a lot of info that is needed, but I did find a way to shorten it a little by making some assumptions.
I added a new [...]

Yes! I finally got the beta out the door to a few beta testers. Hopefully the testers will beat the crap out of it and tell me where all of the issues are. In the meanwhile I will try to run through testing everything in various ways as well.
This is what September 13, 2006 [...]

If you are serious about using AdMod I need you… When I mean serious I mean that when you have to change something in AD you start thinking of the AdMod switches to use, not what GUI tool to open. Do you do schema changes with AdMod in your lab on the fly? That kind of [...]

I just wanted to touch base and let everyone know that admod v01.07.00 is still coming along. I have finally finished getting some additional debug logging into the tool in the event someone finds something that doesn’t appear to be working right and need to get me involved. This is necessary for some of the [...]

I have updated the LG program… Well actually I have cleaned up and released a private version of LG that allows you to specify SIDs instead of names to add/remove members. It also will let you clear all members from a local group in one command.
If you aren’t familiar with LG, it is a tool that [...]

A couple of years ago a friend asked me to add the ability to do an actual password change instead of a password set in the ChangePW utility. I made a quick change for him and sent it off as it needed it quickly. I planned on going back and updating the usage/help and the [...]

Auto add of enabled functional users so you can build up a test pool of users or other objects….
 
[Wed 06/21/2006 22:46:46.36]
F:\Dev\CPP\AdMod>admod -e -add -autobase 25:cn=autouser,ou=autousers,dc=joe,dc=com -bmod {{*RDN*}}_{{*cnt*}},{{*parent*}} objectclass::user -kerbenc unicodepwd::{{*rnd*:6:8}} samac
countname::{{*name*}}_{{*cnt*}} useraccountcontrol::512 -exterr
AdMod V01.07.00cpp_ALPHA Joe Richards (joe@joeware.net) June 2006
DN Count: 25
Using server: 2k3dc02.joe.com
Adding specified objects…
   DN: cn=autouser_0,ou=autousers,dc=joe,dc=com… “UZ0Hn*#T”
   DN: cn=autouser_1,ou=autousers,dc=joe,dc=com… “R;MG]#0l”
   DN: cn=autouser_2,ou=autousers,dc=joe,dc=com… “S8Lks~J”
   DN: [...]

I have started getting some emails asking…. “Hey where the heck is the updated version of AdMod?”
Well I don’t know where it is. Well that isn’t true, it is up in another Window right now and I am taking a small break from it to write this entry. Adding my CSV/ADCSV capability is pretty serious [...]

I was contacted about a bug in MemberOf. Stupid mistake on my part really… If a user/computer was in a member of a group that was locked down via permissions from the person running the tool they would have the opportunity to experience MemberOf hanging and eventually crashing. Again very stupid mistake.
This is now corrected [...]

I have updated the software for this blog… If you encounter an issue, please let me know.

I have updated the MemberOf utility.
This is just a quickie update as I received requests from like three people in less than a week that were for similar requests I have gotten over the years. I want to rewrite this from scratch again to take advantage of some stuff that I have learned to make it [...]

Ok, after much delay, the new version of ExchMbx has been released. The main update here is that it now works to move mailboxes again on Exchange Server 2003 SP2. The Microsoft Exchange Server 2003 SP2 update had a nice “fix” where the Exchange Dev Team broke the mailbox interface contract by changing the parameters [...]

I upgraded the blog software this evening. It would have gone perfectly but I dorked it up.
Long story short, I wanted to use a parallel install upgrade method and when I did that I totally spaced on one of the directory levels required. It is something that I have only encountered with this [...]

As I spin down from yet another meaningless hectic month I have come to the conclusion that this simple country red-neck hick boy[1] has had enough.
As much fun as it is to run around with your hair on fire and having no time to spend on exactly what you want to spend it on [...]

AdFind has been updated. I call this the DEC Release for the Directory Experts Conference because my good friend Dean kept saying when working out presentation ideas, “It sure would be cool if AdFind could do this and this and that and this and maybe some of that and…”. I just kept writing his ideas [...]

AdQueueLoop has been updated to version 2. Lots of changes and bug fixes. I don’t expect this to excite many people because most people don’t have a clue what it is telling you anyway, but for those who do know and care, you will be excited by the CSV File output option and the “quieter” [...]

I have released ADFIND V01.30.00
The primary reason for this version is to fix a bug that was introduced in V01.27.00 which caused multivalue GUID/SID attributes to be displayed incorrectly. I found this myself when working out a process for something that I can’t for the life of me recall at the moment. I found the [...]

I created a new utility this weekend called DNSSrvRec. There was some discussion on ActiveDir.Org about registering some additional DNS SRV records for DCs. This utility allows you to create whatever SRV records you would like to create as well as delete SRV records.
See
http://www.joeware.net/win/free/tools/DNSSrvRec.htm

Version V01.28.00 was uploaded to the website as of 9PM EST 12/21/2005.
This version fixes three bugs
1. Bug in the object counting when using the -incldn switch.
2. Bug in how usage is displayed during certain error conditions.
3. Bug in STATS parsing. This was a niggling problem that has been around for a while. It primarily impacted [...]

I have updated ClientTest, it is one of the lesser known tools but has still had several thousand downloads.
The update was for a single request I have gotten for it, to allow someone to cut and paste from the data window. That was like a 15 minute update and testing cycle so I did it. [...]

Another much awaited update….
CPAU gets some fixes that I put in some time ago but never publicly published plus some new options.
You can get the updated tool at http://www.joeware.net/win/free/tools/cpau.htm
Updates include:
o Fixed bug in -title
o Fixed bug in -c / -k
o Added a warning when using network authentication
o Changed some backend string and param handling
o Added [...]

I have finally released the new version of ADFIND, it is V01.27.00. You can download at http://www.joeware.net/win/free/tools/adfind.htm.
Lots of changes. Probably the one that people will really like right off is the CSV capability since it has been so heavily requested. However I think the -e and -ef are pretty cool. The -pr switch [...]

I added a couple of features to FindExpAcc to help folks out using it in scripts to send messages to people about upcoming expirations…
The first change is a new column in the CSV output called expireDays. This field is the number of days until expiration. If it has a negative value, it means the account [...]

SvcUtil has been updated to work with Windows Server 2003 SP1 to allow someone who has been delegated rights to a specific service to work with that service even if they aren’t logged on locally to the machine or an administrator on the machine.

It was brought to my attention that the version of GCCHK that is downloaded from the website was V01.01.00 instead of the V01.03.00 that is specified in the web page. The actual download file got revved back at some point, it is now corrected.
If you use this tool, please verify the version.

I corrected a bug in AdMod with undeleting objects. New version is V01.06.00.
A change with how DNs were handled in V01.05.00 caused an issue with the undelete process that I should have caught in testing but didn’t. Luckily Jorge ran into the bug and emailed me about it and I was able to correct it [...]

I have updated AdMod to V01.05.00.

Fixed a bug where the RDN of objects that are moved are changed to lowercase.
Added Kerberos Encryption -kerbenc
Added ability to modify Binary Attributes, GUID##, SID##, BIN##.
Added ability to set password via unicodePwd (doesn’t work on 2K)
Added ability to set password via ADSI

I have fielded quite a few questions lately around the topic of “Where are the updates and new tools?”. Well the answer is I am quite busy with real work and other things. I would love to just work on joeware every day, every week, every month because I love doing this stuff. However it [...]

Ok, the intent here is that you can subscribe to this one feed and be able to get notifications of updates to the joeware tools…
The feed should be http://blog.joeware.net/cat/updates/feed/