joeware - never stop exploring... :)

Recently needed to pull some QFE info to validate some things… Found some fun commands. wmic qfe list full /format:htable wmic /node:”servername” qfe list full /format:csv Rating 3.50 out of 5

Today I ran into an issue where a syncing tool blew up because it encountered an object that had multiple values in an attribute that “normally” has a single value in it and it didn’t know how to properly sync that object. Well obviously whomever set up the syncing tool kind of made a mistake […]

Recently I was searching for some specific OU’s in Active Directory that had a specific substring within the name. i.e. it didn’t start with a specific substring, the substring I wanted was buried in the main string like for example the substring Crab in the string Joe’s Crab Shack which would be represented as *crab* […]

Back on Jan 21 I tipped my hand on a new capability in AdFind which for many people is extremely exciting based on the feedback in my inbox. To refresh your memory, that was the ability for AdFind to take in a list of Base DN’s to execute queries against. For short we will say […]

I received an email this evening that I swore I had previously wrote something up on the blog for and didn’t, so I will share… The email From: xxx@domain.gov Sent: Wednesday, January 28, 2009 7:28 PMTo: ‘joe@joeware.net’Subject: Adfind piped into admod question Good evening Joe, First I’d like to commend you on your books, website, […]

Example 1: Get tokenGroups attribute for every direct member of the domain admins group. F:\Dev\Current\CPP\AdFind\Release>adfind -default -f name="domain admins" member -list | adfind -s base tokengroups -resolvesids AdFind V01.40.00cpp **BETA** Joe Richards (joe@joeware.net) January 2009 Using server: TEST-DC1.test.loc:389 Directory: Windows Server 2003 dn:CN=TestAdminClone,OU=Users,OU=TestOU,DC=test,DC=loc >tokenGroups: BUILTIN\Users >tokenGroups: BUILTIN\Administrators >tokenGroups: TEST\DnsAdmins >tokenGroups: TEST\Domain Users >tokenGroups: TEST\Domain Admins […]

Not really an issue or at least it shouldn’t be, if something is generating more than 50 concurrent NSPI connections, it likely needs to be checked out anyway…   NSPI connections from Microsoft Outlook to a Windows Server 2008-based domain controller may fail with an error code: “MAPI_E_LOGON_FAILED” This behavior occurs because Windows Server 2008 […]

My recent post about getting Active Directory replication Meta Data has spawned a considerable number of emails. I wanted to take a moment and remind everyone of the help switch specifically talking about the replication metadata info. This usage provided in AdFind tells you your sort options available for each metadata attribute and what info […]

This is a new feature that I added to AdFind on this last version. Sometimes you look at a record and you want to quickly know the delta time between now and the time listed. I have added the –tdcd option to do that. By default it will handle the int8 values, but if you […]

Sorry folks, haven’t released adfind yet, still testing and checking it out. Amongst other things, I have found some new constants in some of the binary flags to decode for Windows Server 2008 when I was testing that I needed to get into the tool because I hate seeing things like F:\Dev\Current\CPP\AdFind\Debug>adfind -rootdse msds-replallinboundneighbors;binary -h […]