Home  Tutorials  Active Directory


AD Computer Finder v1.1 User Guide (EN)

 
“AD Computer Finder v1.1” is a User Interface that is based on the use of dsquery computer commands. It can be used to:
  • Get a list of Active Directory computer accounts based on certain criteria that you can specify
  • Get the dsquery computer command that you can use to have the wanted list of computers
  • Save the output of the search in a text file.
  • Generate a report in a text file that contains a list of:
    • Disabled AD computer accounts
    • Inactive AD computer accounts for more than x weeks
    • AD computers which passwords were stale since more x days
The use of this software is simple and you can refer to this User Guide.
 

Available modes:

 
“AD Computer Finder v1.1” presents essentially two modes that can be used:
 

1.      Standard Mode:

 
Using this mode, you will be able to:
  • Search AD computer accounts based on certain criteria
  • Get the dsquery computer command that you can use to have the wanted list of computers
  • Save the output of the search in a text file

This mode presents two sub-modes which are:

  • Simple mode: This mode contains the most of options that you can use to search computer accounts in Active Directory. It is the sub-mode that you get by default when you start “AD Computer Finder v1.1”.
Figure 1: Simple mode in “AD Computer Finder v1.1”
 
  • Detailed mode: This mode contains all possible options that you can use to search computer accounts in Active Directory. To use this sub-mode, you have to click on Detailed Mode >>
Figure 2: Detailed mode in “AD Computer Finder v1.1”
 

Remarks:

To get back to “Simple mode”, you have to click on << Simple Mode.

If you want to save the output of the search in a text file, just specify the text file path and name under Save command output in: (example: c:\output.txt).
 

2.      Report Mode:

 

Using this mode, you will be able to generate a report in a text file that contains a list of:

  • Disabled AD computer accounts
  • Inactive AD computer accounts for more than x weeks (By default, x is set to 4 weeks)
  • AD computers which passwords were stale since more than x days (By default, x is set to 30 days)
Figure 3: Report mode in “AD Computer Finder v1.1”
 

Remarks:

  • To get back to “Simple mode”, you have to click on Detailed Mode >>.
  • If you want to save the output of the search in a text file, just specify the text file path and name under Save command output in: (example: c:\output.txt).
  • If you are using “Report Mode”, you can not specify the number of computer names to be returned. This mode returns all found computer names.

Available search and display options:

 
The available search and display options are:
  • Search computers in: Specifies the node in the console tree where the search starts. You can specify the forest root (forestroot), domain root (domainroot), or distinguished name of a node as the start node. If you specify forestroot, dsquery searches by using the global catalog. The default value is domainroot.
  • Computer name: Searches for computers whose name attributes (value of CN attribute) matches the mentioned value. For example, "te*" or "*it" or "t*it".
  • Computer description: Searches for computers whose description attributes match the mentioned value. For example, "te*" or "*it" or "t*it".
  • Computer SAMName: Searches for computers whose SAM account names match the mentioned value.
  • Is disabled: Searches for all computers whose accounts are disabled.
  • Nb of returned objects: Specifies the number of objects to return that matches the criteria that you specify. If you specify a value of 0, this parameter returns all matching objects. If you do not specify this parameter, “AD Computer Finder v1.1” displays the first 100 results by default.
  • Inactive for more than: Searches for computers that have been inactive (stale) for the number of weeks that you specify.
  • Pwd stale for more than: Searches for computers whose passwords have not changed for the number of days that you specify.
  • Display format: Specifies the format that “AD Computer Finder v1.1” uses to display the search results. A dn value displays the distinguished name of each entry. An rdn value displays the relative distinguished name of each entry. A samid value displays the Security Accounts Manager (SAM) account name of each entry. The default value is dn.
  • Scope: Specifies the scope of the search. A subtree value specifies a subtree that is rooted at the start node in the console tree. A onelevel value specifies the immediate children of the start node only. A base value specifies the single object that the start node represents. If you specify forestroot as the start node, subtree is the only valid scope. The default value is subtree.
  • Use quiet mode: Suppresses all output to standard output (quiet mode).
  • Use referrals: Specifies that the search use recursion or follow referrals during search. By default, the search will not follow referrals.
  • Use Global Catalog: Specifies that the search use the Active Directory global catalog.
  • Connect to: Connects a computer to a remote server or domain that you specify. By default, “AD Computer Finder v1.1” connects the computer to the domain controller in the logon domain.
  • Username: Specifies the user name with which the user logs on to a remote server. By default, -u uses the user name with which the user logged on. You can use any of the following formats to specify a user name:
    • user name (for example, Ahmed)
    • domain\user name (for example, Contoso\Ahmed)
    • user principal name (UPN) (for example, ahmed@contoso.com)
  • Password: Specifies to use either a password to log on to a remote server (Don’t type *).