Active Directory Audit tool?

[karatebum]

I remember running accross a vbs script or something, that would craw ad 2000, and would populate your users and groups into a excel sheet.

do you guys know of anything that is doing that these days? we're on 2008, and don't really use it(samba shop), but we're starting to use more applications that use AD, and thus I'd like to keep a eye on things(as we roll it out to everybody). Ideally my boss came to me, and wanted something that would send out a email if certain groups were added to, if that exists, please let me know.

thanks!!

[ocabj]

Why not just write a perl script with NET::LDAP to pull the user and group info and output to a CSV? Or you can use PowerShell.

I use perl since that's what I write most of my backend scripts in, particularly to handle automated LDAP stuff (including populating and maintaining users in our campus AD).

[karatebum]

i bought the o'reily book on perl like 8 years ago, and my brain started to melt after the first page. thanks though

[ocabj]

Perl is easy. The code to dump what you need is probably only 30 lines. But you could also just write a shell script in bash, tcsh, ksh, or whatever your favorite shell is, and use openldap's ldapsearch to make the ldap calls against your AD to dump the appropriate attributes for each user object and just format it on the fly with awk (and sed).

[orchard]

http://www.techrepublic.com/blog/datacenter/powershell-script-for-getting-active-directory-information/3612

Has the info/and description of getting user information. I have kluged it to use the script with computer information, it's a starting point!

[JDay]

i bought the o'reily book on perl like 8 years ago, and my brain started to melt after the first page. thanks though

Which book did you buy? There are a few of them and only Programming Perl is aimed towards beginners. Computer Science & Perl Programming is a bit more advanced. You can also find many tutorials online that make learning Perl fairly simple.

[Bryansix]

I know this doesn't answer your question but you should post this question on Server Fault. My co-worker will probably answer it.

Also, I'm fairly certain you can do the LDAP query in vb.net since that language is much easier for a human to parse.

[karatebum]

thanks everybody for the input, the book i bought was perl in a nutshell, and i think it was for programing thinking back(its in a box somehwere). you've inspired me to not be a lazy *** and do it myself, thank you!!!

[dly123]

If you were running 2008 R2, the task you are trying to do could be done with a few active directory powershell cmdlets and the export-csv cmdlet

http://technet.microsoft.com/en-us/library/ee617195.aspx

[Blitzburgh]

EXTERIOR: DAGOBAH -- DAY

With Yoda strapped to his back, Luke climbs up one of the many thick vines that grow in the swamp until he reaches the Dagobah statistics lab. Panting heavily, he continues his exercises -- grepping, installing new packages, logging in as root, and writing replacements for two-year-old shell scripts in Python.

YODA:

Code! Yes. A programmer's strength flows from code maintainability. But beware of Perl. Terse syntax... more than one way to do it... default variables. The dark side of code maintainability are they. Easily they flow, quick to join you when code you write. If once you start down the dark path, forever will it dominate your destiny, consume you it will.

LUKE:

Is Perl better than Python?

YODA:

No... no... no. Quicker, easier, more seductive.

LUKE:

But how will I know why Python is better than Perl?

YODA:

You will know. When your code you try to read six months from now.