joeware - never stop exploring... :)

If you send me an email asking for help saying that one of my utilities doesn’t work or you can’t get it to work, you need to specify in the body of the email what commands you actually tried. Period. End of Story. No more, "It doesn’t work, what do I type to get it to work?" or "I want to do x and y or possibly z, how do I do that? What do I type?"

In fact, how about even putting in a little command line text snippet, no I don’t mean use the snipping tool or some other GUI screen capture tool, I mean copy and paste the text from the command prompt… What is the difference you ask? Well first off, you probably shouldn’t be admin’ing machines if you asked that but here it is…

This is a screen capture:

This is a text snippet of the same thing:

[Thu 03/01/2012 22:01:43.35]
F:\Dev\cpp\_old\OLD>adfind\release\adfind -e -default -f name="DFSR-LocalSettings" -flagdc

AdFind V01.46.00cpp Joe Richards (joe@joeware.net) March 2012

Using server: WIN8DOM2-DC1.win8dom2.loc:389
Directory: Windows Server 8
Base DN: DC=win8dom2,DC=loc

dn:CN=DFSR-LocalSettings,CN=WIN8DOM2-DC1,OU=Domain Controllers,DC=win8dom2,DC=loc
>objectClass: top
>objectClass: msDFSR-LocalSettings
>cn: DFSR-LocalSettings
>distinguishedName: CN=DFSR-LocalSettings,CN=WIN8DOM2-DC1,OU=Domain Controllers,DC=win8dom2,DC=loc
>instanceType: 4 [WRITABLE(4)]
>whenCreated: 20120301023009.0Z
>whenChanged: 20120301023513.0Z
>uSNCreated: 12479
>uSNChanged: 12489
>showInAdvancedViewOnly: TRUE
>name: DFSR-LocalSettings
>objectGUID: {EC3F04A1-A11A-413C-9425-C91A7701E0DE}
>objectCategory: CN=ms-DFSR-LocalSettings,CN=Schema,CN=Configuration,DC=win8dom2,DC=loc
>dSCorePropagationData: 20120301023009.0Z
>dSCorePropagationData: 16010101000000.0Z
>msDFSR-Version: 1.0.0.0
>msDFSR-Flags: 48 [ELIMINATED (STABLE_STATE_3)]

1 Objects returned

Why? Because I said so. And also because sometimes the screen captures don’t come through properly, always I don’t want to have fully retype the command because there could possibly be something going on with the specific characters that I won’t catch that you do because of Unicode, always the image is bigger than the text in sheer size.

   joe

Ummm joe… it’s been two weeks (http://blog.joeware.net/2012/02/13/2429/)… what’s up?

Well something has happened that has pushed back the date a little, specifically http://blog.joeware.net/2012/02/29/2440/. So I am going through looking for things that should be decoded. Plus I dumped an entire new forest and I am looking at all attributes trying to determine what else should be decoded. this includes older attributes as well that perhaps I previously missed or couldn’t figure out. So besides some of the controls and behavior attributes for Windows Server 8, I have also tackled some other attributes such as rIDAvailablePool, rIDAllocationPool, rIDPreviousAllocationPool, and msDFSR-Flags. I also put a *beta* decode in for a new dsHeuristics value. I also, and this is pretty cool, added the ability for AdFind to export a binary attribute to a file as well have AdMod import a binary file into an attribute. 

So let’s let the tools stew just a little bit longer shall we. 😉

     joe

So I am looking through email and I find this

We have never met but today I became aware of two of your utilities; ADFind and ADMod.  I think they might be able to save my job but I desperately need help please.  I simply am not technical enough to understand the switches. I’ve been at it now for just under seven and a half hours.  The users have all gone home as there was nothing they could do.  My name is mud. If you can help I will make a £10 donation to your favourite charity.

This person then says

I have found the following, which I can’t make work at all. From the screen grabs below is it possible to work out the correct syntax please?

where the following is a cut and paste from  http://www.techtalkz.com/windows-server-2003/65070-recover-ou.html which is straight from The Princess followed by screen images from ADUC showing the OU in place and then missing… But no info on what commands were actually tried and the results which means I truly have no idea what is going on since he already spent 7.5 hours on it and those instructions are the normal Jorge detailed quality so I would expect someone could follow them ok meaning there could be something else wrong.

Anyway I responded with “What exactly did you try and what did it do?”

Unfortunately for me that was the 4th email in a row in the set of emails sent to me the last day or so that all basically said, “I need your help, I don’t know how to make your tools work, tell me how to make them work.”, without giving any detail on what the admins have actually done and what the failures were. As I have mentioned before on several occasions I am seeing more and more of this. Great job hiring managers and headhunters, you are doing your companies/customers a great service… In the meanwhile, I need to research how you have to submit $500 USD in order to send me an email.

    joe

Windows Server 8 Beta RootDSE

[Wed 02/29/2012 21:48:12.00]
F:\Dev\cpp>adfind\release\adfind -rootdse

AdFind V01.46.00cpp Joe Richards (joe@joeware.net) February 2012

Using server: WIN8DOM2-DC1.win8dom2.loc:389
Directory: Windows Server 8

dn:
>currentTime: 20120301025803.0Z
>subschemaSubentry: CN=Aggregate,CN=Schema,CN=Configuration,DC=win8dom2,DC=loc
>dsServiceName: CN=NTDS Settings,CN=WIN8DOM2-DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=win8dom2,DC=loc
>namingContexts: DC=win8dom2,DC=loc
>namingContexts: CN=Configuration,DC=win8dom2,DC=loc
>namingContexts: CN=Schema,CN=Configuration,DC=win8dom2,DC=loc
>defaultNamingContext: DC=win8dom2,DC=loc
>schemaNamingContext: CN=Schema,CN=Configuration,DC=win8dom2,DC=loc
>configurationNamingContext: CN=Configuration,DC=win8dom2,DC=loc
>rootDomainNamingContext: DC=win8dom2,DC=loc
>supportedControl: 1.2.840.113556.1.4.319 [LDAP_PAGED_RESULT_OID_STRING]
>supportedControl: 1.2.840.113556.1.4.801 [LDAP_SERVER_SD_FLAGS_OID]
>supportedControl: 1.2.840.113556.1.4.473 [LDAP_SERVER_SORT_OID]
>supportedControl: 1.2.840.113556.1.4.528 [LDAP_SERVER_NOTIFICATION_OID]
>supportedControl: 1.2.840.113556.1.4.417 [LDAP_SERVER_SHOW_DELETED_OID]
>supportedControl: 1.2.840.113556.1.4.619 [LDAP_SERVER_LAZY_COMMIT_OID]
>supportedControl: 1.2.840.113556.1.4.841 [LDAP_SERVER_DIRSYNC_OID]
>supportedControl: 1.2.840.113556.1.4.529 [LDAP_SERVER_EXTENDED_DN_OID]
>supportedControl: 1.2.840.113556.1.4.805 [LDAP_SERVER_TREE_DELETE_OID]
>supportedControl: 1.2.840.113556.1.4.521 [LDAP_SERVER_CROSSDOM_MOVE_TARGET_OID]
>supportedControl: 1.2.840.113556.1.4.970 [LDAP_SERVER_GET_STATS_OID]
>supportedControl: 1.2.840.113556.1.4.1338 [LDAP_SERVER_VERIFY_NAME_OID]
>supportedControl: 1.2.840.113556.1.4.474 [LDAP_SERVER_RESP_SORT_OID]
>supportedControl: 1.2.840.113556.1.4.1339 [LDAP_SERVER_DOMAIN_SCOPE_OID]
>supportedControl: 1.2.840.113556.1.4.1340 [LDAP_SERVER_SEARCH_OPTIONS_OID]
>supportedControl: 1.2.840.113556.1.4.1413 [LDAP_SERVER_PERMISSIVE_MODIFY_OID]
>supportedControl: 2.16.840.1.113730.3.4.9 [LDAP_CONTROL_VLVREQUEST]
>supportedControl: 2.16.840.1.113730.3.4.10 [LDAP_CONTROL_VLVRESPONSE]
>supportedControl: 1.2.840.113556.1.4.1504 [LDAP_SERVER_ASQ_OID]
>supportedControl: 1.2.840.113556.1.4.1852 [LDAP_SERVER_QUOTA_CONTROL_OID]
>supportedControl: 1.2.840.113556.1.4.802 [LDAP_SERVER_RANGE_OPTION_OID]
>supportedControl: 1.2.840.113556.1.4.1907 [LDAP_SERVER_SHUTDOWN_NOTIFY_OID]
>supportedControl: 1.2.840.113556.1.4.1948 [LDAP_SERVER_RANGE_RETRIEVAL_NOERR]
>supportedControl: 1.2.840.113556.1.4.1974 [LDAP_SERVER_FORCE_UPDATE]
>supportedControl: 1.2.840.113556.1.4.1341 [RODC_DCPROMO]
>supportedControl: 1.2.840.113556.1.4.2026 [LDAP_SERVER_DN_INPUT_OID]
>supportedControl: 1.2.840.113556.1.4.2064 [LDAP_SERVER_SHOW_RECYCLED_OID]
>supportedControl: 1.2.840.113556.1.4.2065 [LDAP_SERVER_SHOW_DEACTIVATED_LINK_OID]
>supportedControl: 1.2.840.113556.1.4.2066 [LDAP_SERVER_POLICY_HINTS_OID]
>supportedControl: 1.2.840.113556.1.4.2090 [LDAP_SERVER_DIRSYNC_EX_OID]
>supportedControl: 1.2.840.113556.1.4.2205 [LDAP_SERVER_UPDATE_STATS_OID]
>supportedControl: 1.2.840.113556.1.4.2204 [LDAP_SERVER_TREE_DELETE_EX_OID]
>supportedControl: 1.2.840.113556.1.4.2206 [LDAP_SERVER_SEARCH_HINTS_OID]
>supportedControl: 1.2.840.113556.1.4.2211 [LDAP_SERVER_EXPECTED_ENTRY_COUNT_OID]
>supportedLDAPVersion: 3
>supportedLDAPVersion: 2
>supportedLDAPPolicies: MaxPoolThreads
>supportedLDAPPolicies: MaxDatagramRecv
>supportedLDAPPolicies: MaxReceiveBuffer
>supportedLDAPPolicies: InitRecvTimeout
>supportedLDAPPolicies: MaxConnections
>supportedLDAPPolicies: MaxConnIdleTime
>supportedLDAPPolicies: MaxPageSize
>supportedLDAPPolicies: MaxBatchReturnMessages
>supportedLDAPPolicies: MaxQueryDuration
>supportedLDAPPolicies: MaxTempTableSize
>supportedLDAPPolicies: MaxResultSetSize
>supportedLDAPPolicies: MinResultSets
>supportedLDAPPolicies: MaxResultSetsPerConn
>supportedLDAPPolicies: MaxNotificationPerConn
>supportedLDAPPolicies: MaxValRange
>highestCommittedUSN: 12544
>supportedSASLMechanisms: GSSAPI
>supportedSASLMechanisms: GSS-SPNEGO
>supportedSASLMechanisms: EXTERNAL
>supportedSASLMechanisms: DIGEST-MD5
>dnsHostName: WIN8DOM2-DC1.win8dom2.loc
>ldapServiceName: win8dom2.loc:win8dom2-dc1$@WIN8DOM2.LOC
>serverName: CN=WIN8DOM2-DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=win8dom2,DC=loc
>supportedCapabilities: 1.2.840.113556.1.4.800 [LDAP_CAP_ACTIVE_DIRECTORY_OID]
>supportedCapabilities: 1.2.840.113556.1.4.1670 [LDAP_CAP_ACTIVE_DIRECTORY_V51_OID]
>supportedCapabilities: 1.2.840.113556.1.4.1791 [LDAP_CAP_ACTIVE_DIRECTORY_LDAP_INTEG_OID]
>supportedCapabilities: 1.2.840.113556.1.4.1935 [LDAP_CAP_ACTIVE_DIRECTORY_V60_OID]
>supportedCapabilities: 1.2.840.113556.1.4.2080 [LDAP_CAP_ACTIVE_DIRECTORY_V61_R2_OID]
>dsSchemaAttrCount: 1426
>dsSchemaClassCount: 256
>dsSchemaPrefixCount: 39
>isSynchronized: TRUE
>isGlobalCatalogReady: TRUE
>supportedConfigurableSettings: DynamicObjectDefaultTTL
>supportedConfigurableSettings: DynamicObjectMinTTL
>supportedConfigurableSettings: DisableVLVSupport
>supportedConfigurableSettings: ADAMDisablePasswordPolicies
>supportedConfigurableSettings: ADAMDisableLogonAuditing
>supportedConfigurableSettings: ADAMLastLogonTimestampWindow
>supportedConfigurableSettings: RequireSecureSimpleBind
>supportedConfigurableSettings: RequireSecureProxyBind
>supportedConfigurableSettings: MaxReferrals
>supportedConfigurableSettings: ReferralRefreshInterval
>supportedConfigurableSettings: SelfReferralsOnly
>supportedConfigurableSettings: ADAMAllowADAMSecurityPrincipalsInConfigPartition
>supportedConfigurableSettings: ADAMDisableSPNRegistration
>supportedConfigurableSettings: ADAMDisableSSI
>supportedExtension: 1.3.6.1.4.1.1466.20037 [LDAP_SERVER_START_TLS_OID]
>supportedExtension: 1.3.6.1.4.1.1466.101.119.1 [LDAP_TTL_REFRESH_OID]
>supportedExtension: 1.2.840.113556.1.4.1781 [LDAP_SERVER_FAST_BIND_OID]
>supportedExtension: 1.3.6.1.4.1.4203.1.11.3 [LDAP_SERVER_WHO_AM_I_OID]
>supportedExtension: 1.2.840.113556.1.4.2212 [LDAP_SERVER_BATCH_REQUEST_OID]
>domainFunctionality: 5 [Windows Server 8 Domain Mode]
>forestFunctionality: 5 [Windows Server 8 Forest Mode]
>domainControllerFunctionality: 5 [Windows Server 8 Mode]
>validFSMOs: CN=Schema,CN=Configuration,DC=win8dom2,DC=loc
>validFSMOs: CN=Partitions,CN=Configuration,DC=win8dom2,DC=loc
>validFSMOs: DC=win8dom2,DC=loc
>validFSMOs: CN=Infrastructure,DC=win8dom2,DC=loc
>validFSMOs: CN=RID Manager$,CN=System,DC=win8dom2,DC=loc
>tokenGroups: S-1-5-21-3917776897-2119544392-2693853299-1102
>tokenGroups: S-1-5-21-3917776897-2119544392-2693853299-513
>tokenGroups: S-1-1-0
>tokenGroups: S-1-5-32-545
>tokenGroups: S-1-5-32-554
>tokenGroups: S-1-5-32-544
>tokenGroups: S-1-5-2
>tokenGroups: S-1-5-11
>tokenGroups: S-1-5-15
>tokenGroups: S-1-5-21-3917776897-2119544392-2693853299-512
>tokenGroups: S-1-5-21-3917776897-2119544392-2693853299-518
>tokenGroups: S-1-5-21-3917776897-2119544392-2693853299-572
>dsaVersionString: 6.2.8250.0 (winmain_win8beta.120217-1520)
>serviceAccountInfo: replAuthenticationMode=1
>serviceAccountInfo: accountType=domain
>serviceAccountInfo: systemAccount=true
>serviceAccountInfo: domainType=domainWithKerb
>serviceAccountInfo: machineDomainName=WIN8DOM2
>msDS-PrincipalName: WIN8DOM2\$joe
>msDS-PortLDAP: 389
>msDS-PortSSL: 636
>spnRegistrationResult: 0
>approximateHighestInternalObjectID: 3938

1 Objects returned

Windows Server 8 ADAM RootDSE

[Wed 02/29/2012 22:00:58.49]
F:\Dev\cpp>adfind\release\adfind -hh win8dom2-dc1.win8dom2.loc:50000 -rootdse

AdFind V01.46.00cpp Joe Richards (joe@joeware.net) February 2012

Using server: WIN8DOM2-DC1.win8dom2.loc:50000
Directory: Windows Server 8 Active Directory Application Mode

dn:
>currentTime: 20120301030210.0Z
>subschemaSubentry: CN=Aggregate,CN=Schema,CN=Configuration,CN={B2CA17A7-B808-4456-A1CC-E6E9393FDBA1}
>dsServiceName: CN=NTDS Settings,CN=WIN8DOM2-DC1$instance1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,CN={B2CA17A7-B808-4456-A1CC-E6E9393FDBA1}
>namingContexts: CN=Configuration,CN={B2CA17A7-B808-4456-A1CC-E6E9393FDBA1}
>namingContexts: CN=Schema,CN=Configuration,CN={B2CA17A7-B808-4456-A1CC-E6E9393FDBA1}
>namingContexts: O=win8betatest
>schemaNamingContext: CN=Schema,CN=Configuration,CN={B2CA17A7-B808-4456-A1CC-E6E9393FDBA1}
>configurationNamingContext: CN=Configuration,CN={B2CA17A7-B808-4456-A1CC-E6E9393FDBA1}
>supportedControl: 1.2.840.113556.1.4.319 [LDAP_PAGED_RESULT_OID_STRING]
>supportedControl: 1.2.840.113556.1.4.801 [LDAP_SERVER_SD_FLAGS_OID]
>supportedControl: 1.2.840.113556.1.4.473 [LDAP_SERVER_SORT_OID]
>supportedControl: 1.2.840.113556.1.4.528 [LDAP_SERVER_NOTIFICATION_OID]
>supportedControl: 1.2.840.113556.1.4.417 [LDAP_SERVER_SHOW_DELETED_OID]
>supportedControl: 1.2.840.113556.1.4.619 [LDAP_SERVER_LAZY_COMMIT_OID]
>supportedControl: 1.2.840.113556.1.4.841 [LDAP_SERVER_DIRSYNC_OID]
>supportedControl: 1.2.840.113556.1.4.529 [LDAP_SERVER_EXTENDED_DN_OID]
>supportedControl: 1.2.840.113556.1.4.805 [LDAP_SERVER_TREE_DELETE_OID]
>supportedControl: 1.2.840.113556.1.4.521 [LDAP_SERVER_CROSSDOM_MOVE_TARGET_OID]
>supportedControl: 1.2.840.113556.1.4.970 [LDAP_SERVER_GET_STATS_OID]
>supportedControl: 1.2.840.113556.1.4.1338 [LDAP_SERVER_VERIFY_NAME_OID]
>supportedControl: 1.2.840.113556.1.4.474 [LDAP_SERVER_RESP_SORT_OID]
>supportedControl: 1.2.840.113556.1.4.1339 [LDAP_SERVER_DOMAIN_SCOPE_OID]
>supportedControl: 1.2.840.113556.1.4.1340 [LDAP_SERVER_SEARCH_OPTIONS_OID]
>supportedControl: 1.2.840.113556.1.4.1413 [LDAP_SERVER_PERMISSIVE_MODIFY_OID]
>supportedControl: 2.16.840.1.113730.3.4.9 [LDAP_CONTROL_VLVREQUEST]
>supportedControl: 2.16.840.1.113730.3.4.10 [LDAP_CONTROL_VLVRESPONSE]
>supportedControl: 1.2.840.113556.1.4.1504 [LDAP_SERVER_ASQ_OID]
>supportedControl: 1.2.840.113556.1.4.1852 [LDAP_SERVER_QUOTA_CONTROL_OID]
>supportedControl: 1.2.840.113556.1.4.802 [LDAP_SERVER_RANGE_OPTION_OID]
>supportedControl: 1.2.840.113556.1.4.1907 [LDAP_SERVER_SHUTDOWN_NOTIFY_OID]
>supportedControl: 1.2.840.113556.1.4.1948 [LDAP_SERVER_RANGE_RETRIEVAL_NOERR]
>supportedControl: 1.2.840.113556.1.4.1974 [LDAP_SERVER_FORCE_UPDATE]
>supportedControl: 1.2.840.113556.1.4.1341 [RODC_DCPROMO]
>supportedControl: 1.2.840.113556.1.4.2026 [LDAP_SERVER_DN_INPUT_OID]
>supportedControl: 1.2.840.113556.1.4.2064 [LDAP_SERVER_SHOW_RECYCLED_OID]
>supportedControl: 1.2.840.113556.1.4.2065 [LDAP_SERVER_SHOW_DEACTIVATED_LINK_OID]
>supportedControl: 1.2.840.113556.1.4.2066 [LDAP_SERVER_POLICY_HINTS_OID]
>supportedControl: 1.2.840.113556.1.4.2090 [LDAP_SERVER_DIRSYNC_EX_OID]
>supportedControl: 1.2.840.113556.1.4.2205 [LDAP_SERVER_UPDATE_STATS_OID]
>supportedControl: 1.2.840.113556.1.4.2204 [LDAP_SERVER_TREE_DELETE_EX_OID]
>supportedControl: 1.2.840.113556.1.4.2206 [LDAP_SERVER_SEARCH_HINTS_OID]
>supportedControl: 1.2.840.113556.1.4.2211 [LDAP_SERVER_EXPECTED_ENTRY_COUNT_OID]
>supportedLDAPVersion: 3
>supportedLDAPVersion: 2
>supportedLDAPPolicies: MaxPoolThreads
>supportedLDAPPolicies: MaxDatagramRecv
>supportedLDAPPolicies: MaxReceiveBuffer
>supportedLDAPPolicies: InitRecvTimeout
>supportedLDAPPolicies: MaxConnections
>supportedLDAPPolicies: MaxConnIdleTime
>supportedLDAPPolicies: MaxPageSize
>supportedLDAPPolicies: MaxBatchReturnMessages
>supportedLDAPPolicies: MaxQueryDuration
>supportedLDAPPolicies: MaxTempTableSize
>supportedLDAPPolicies: MaxResultSetSize
>supportedLDAPPolicies: MinResultSets
>supportedLDAPPolicies: MaxResultSetsPerConn
>supportedLDAPPolicies: MaxNotificationPerConn
>supportedLDAPPolicies: MaxValRange
>highestCommittedUSN: 14054
>supportedSASLMechanisms: GSSAPI
>supportedSASLMechanisms: GSS-SPNEGO
>supportedSASLMechanisms: EXTERNAL
>supportedSASLMechanisms: DIGEST-MD5
>dnsHostName: WIN8DOM2-DC1.win8dom2.loc
>serverName: CN=WIN8DOM2-DC1$instance1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,CN={B2CA17A7-B808-4456-A1CC-E6E9393FDBA1}
>supportedCapabilities: 1.2.840.113556.1.4.1851 [LDAP_CAP_ACTIVE_DIRECTORY_ADAM_OID]
>supportedCapabilities: 1.2.840.113556.1.4.1670 [LDAP_CAP_ACTIVE_DIRECTORY_V51_OID]
>supportedCapabilities: 1.2.840.113556.1.4.1791 [LDAP_CAP_ACTIVE_DIRECTORY_LDAP_INTEG_OID]
>supportedCapabilities: 1.2.840.113556.1.4.1935 [LDAP_CAP_ACTIVE_DIRECTORY_V60_OID]
>supportedCapabilities: 1.2.840.113556.1.4.2080 [LDAP_CAP_ACTIVE_DIRECTORY_V61_R2_OID]
>supportedCapabilities: 1.2.840.113556.1.4.1880 [LDAP_CAP_ACTIVE_DIRECTORY_ADAM_DIGEST]
>dsSchemaAttrCount: 392
>dsSchemaClassCount: 62
>dsSchemaPrefixCount: 39
>isSynchronized: TRUE
>supportedConfigurableSettings: DynamicObjectDefaultTTL
>supportedConfigurableSettings: DynamicObjectMinTTL
>supportedConfigurableSettings: DisableVLVSupport
>supportedConfigurableSettings: ADAMDisablePasswordPolicies
>supportedConfigurableSettings: ADAMDisableLogonAuditing
>supportedConfigurableSettings: ADAMLastLogonTimestampWindow
>supportedConfigurableSettings: RequireSecureSimpleBind
>supportedConfigurableSettings: RequireSecureProxyBind
>supportedConfigurableSettings: MaxReferrals
>supportedConfigurableSettings: ReferralRefreshInterval
>supportedConfigurableSettings: SelfReferralsOnly
>supportedConfigurableSettings: ADAMAllowADAMSecurityPrincipalsInConfigPartition
>supportedConfigurableSettings: ADAMDisableSPNRegistration
>supportedConfigurableSettings: ADAMDisableSSI
>supportedExtension: 1.3.6.1.4.1.1466.20037 [LDAP_SERVER_START_TLS_OID]
>supportedExtension: 1.3.6.1.4.1.1466.101.119.1 [LDAP_TTL_REFRESH_OID]
>supportedExtension: 1.2.840.113556.1.4.1781 [LDAP_SERVER_FAST_BIND_OID]
>supportedExtension: 1.3.6.1.4.1.4203.1.11.3 [LDAP_SERVER_WHO_AM_I_OID]
>supportedExtension: 1.2.840.113556.1.4.2212 [LDAP_SERVER_BATCH_REQUEST_OID]
>forestFunctionality: 2 [Windows Server 2003 Forest Mode]
>domainControllerFunctionality: 5 [Windows Server 8 Mode]
>validFSMOs: CN=Schema,CN=Configuration,CN={B2CA17A7-B808-4456-A1CC-E6E9393FDBA1}
>validFSMOs: CN=Partitions,CN=Configuration,CN={B2CA17A7-B808-4456-A1CC-E6E9393FDBA1}
>tokenGroups: S-1-5-21-3917776897-2119544392-2693853299-1102
>tokenGroups: S-1-5-21-3917776897-2119544392-2693853299-513
>tokenGroups: S-1-1-0
>tokenGroups: S-1-5-32-545
>tokenGroups: S-1-5-32-554
>tokenGroups: S-1-5-32-544
>tokenGroups: S-1-5-2
>tokenGroups: S-1-5-11
>tokenGroups: S-1-5-15
>tokenGroups: S-1-5-21-3917776897-2119544392-2693853299-512
>tokenGroups: S-1-5-21-3917776897-2119544392-2693853299-518
>tokenGroups: S-1-5-21-3917776897-2119544392-2693853299-572
>tokenGroups: S-1-5-64-10
>tokenGroups: S-1-530768202-3575268927-512
>tokenGroups: S-1-526474621-1342553557-519
>dsaVersionString: 6.2.8250.0 (winmain_win8beta.120217-1520)
>serviceAccountInfo: replAuthenticationMode=1
>serviceAccountInfo: accountType=domain
>serviceAccountInfo: systemAccount=true
>serviceAccountInfo: domainType=domainWithKerb
>serviceAccountInfo: machineDomainName=WIN8DOM2
>msDS-PrincipalName: WIN8DOM2\$joe
>msDS-PortLDAP: 50000
>msDS-PortSSL: 50001
>spnRegistrationResult: 0
>approximateHighestInternalObjectID: 2034

1 Objects returned

I was planning to release AdFind and AdMod today as per the normal yearly cycle but I am not quite happy with them yet so I am holding off for a little bit. I expect I should be releasing them within two weeks at the latest assuming nothing bad comes up.

   joe