Active Directory: Computerinformationen auslesen

'User-Account Informationen erfragen  
'09.01.07/ge  

Option Explicit

Const C_User = "LDAP://CN=Eink.Guido,OU=Firma,DC=meine,DC=domäne,DC=DE"  
Const C_Log = "c:\Log\Read_User-Account.log"  

Dim O_User
Dim O_FSO
Dim O_Log

Set O_User = GetObject(C_User)
Set O_FSO = CreateObject("Scripting.FileSystemObject")  
Set O_Log = O_FSO.OpenTextFile(C_Log,2,True)

O_Log.writeline C_User
O_Log.writeline ""  

'O_User.GetInfo  

O_Log.writeline "Profil Pfad: " & O_User.ProfilePath  
O_Log.writeline "Script Path: " & O_User.ScriptPath  
O_Log.writeline "Home Verzeichnis: " & O_User.HomeDirectory  
O_Log.writeline "Home Laufwerk: " & O_User.HomeDrive  
O_Log.writeline "CN: " & O_User.cn  
O_Log.writeline "Firma: " & O_User.company  
O_Log.writeline "Vorname: " & O_User.GivenName  
O_Log.writeline "Nachname: " & O_User.sn  
O_Log.writeline "Mail-Adresse: " & O_User.Mail  
O_Log.writeline "AD-Name: " & O_User.Name  
O_Log.writeline "sAMAccount: " & O_User.sAMAccountName  
O_Log.writeline "User-Principal-Name: " & O_User.userPrincipalName  
O_Log.writeline "Computer: " & O_User.userWorkstations  

O_Log.writeline ""  
If O_User.IsAccountLocked = True Then
	O_Log.writeline "Account gesperrt: JA"  
Else
	O_Log.writeline "Account gesperrt: Nein"  
End If

If O_User.userAccountControl And 2 Then
	O_Log.writeline "Account deaktiviert: JA"  
Else
	O_Log.writeline "Account deaktiviert: Nein"  
End If

Const C_Computer = "LDAP://CN=FORSTPC-9,OU=EBZI32,DC=FORST,DC=BWL,DC=DE"  
Dim O_Computer

Set O_Computer = GetObject(C_Computer)

If O_Computer.userAccountControl And 2 Then
	wscript.echo "  Account deaktiviert: JA"  
Else
	wscript.echo "  Account deaktiviert: Nein"  
End If

const C_Log = "c:\Log\List_Computer-in-Domain.log"  
const C_Domain = "DC=meine,DC=domäne,DC=DE"  

DIM O_File
DIM O_Log

Set O_File = CreateObject("Scripting.FileSystemObject")  
if not O_File.FolderExists("c:\Log") then  
	O_File.CreateFolder "c:\Log"  
end if
Set O_Log = O_File.OpenTextFile(C_Log,2,true)

call S_SearchComputer

'###################################  
sub S_SearchComputer
	'on error resume next  
	DIM O_Con
	DIM O_Com
	DIM O_Exec
	DIM L_Filter
	DIM L_Domain
	DIM L_CN
	DIM i
  i = 1
	L_Domain = "<LDAP://" & C_Domain & ">"  
	L_Filter = "(&(objectCategory=Computer))"  
	L_CN = "distinguishedName,CN"  

	SET O_Con = CreateObject("ADODB.Connection")  
	O_Con.Provider = "ADsDSOObject"  
	O_Con.Open "Active Directory Provider"  
	Set O_Com = CreateObject("ADODB.Command")  
	O_Com.ActiveConnection = O_Con
	O_Com.CommandText = L_Domain & ";" & L_Filter & ";" & L_CN & ";subtree"  
	O_Com.Properties("Page Size") = 100  
	O_Com.Properties("Sort On") = "Name"  
	set O_Exec = O_Com.Execute
	if err.number <> 0 then
		'msgbox "Der OU-Name wurde falsch geschrieben oder" & vbcrlf & "der Pfad stimmt nicht!",vbokonly + vbexclamation,"Fehler"  
		wscript.echo err.description
		exit sub
	end if
	O_Exec.MoveFirst
	
	Do until O_exec.eof
        'O_Log.writeline "   LDAP: " & O_Exec.fields(0)  
        O_Log.writeline i & ") Name: " & O_Exec.fields(1)  
        Call F_CheckAccount(O_Exec.fields(0))
        i = i + 1
        O_EXEC.Movenext
	loop
	'on error goto 0  
end sub


Sub F_CheckAccount(P_Pfad)
	Dim O_Computer
	Dim L_Pfad
	
	L_Pfad = "LDAP://" & P_Pfad  
	Set O_Computer = GetObject(L_Pfad)

	If O_Computer.userAccountControl And 2 Then
		O_log.writeline "  Account deaktiviert: JA"  
	Else
		O_log.writeline  "  Account deaktiviert: Nein"  
	End If
End Sub