up vote 1 down vote favorite
share [g+] share [fb]

I have a need to sync Active Directory information with another system. I need to pull out a list of AD users, and all their info (first name, last name, email -- anything stored with their record in AD, essentially.)

I did this once before -- years ago -- and it involved running a command line utility to export the AD user database to an XML file, which I then parsed.

Is this still the right way to do it, or have things changed in the intervening years? Any chance the domain controller has some sort of real-time Web service now?

link|improve this question
50% accept rate
What OS are you using? 2003 or 2008? – KCotreau Jun 13 '11 at 22:31
2003 or 2008? Have you looked at dsget.exe, dsquery.exe or csvde.exe yet? – goblinbox Jun 13 '11 at 22:33
I'd also be curious what you plan to do with the data. That might change someone's potential answer as to the best tool for the job. – Patrick S. Jun 13 '11 at 23:30
feedback

1 Answer

up vote 4 down vote

PowerShell in the way to go. The Get-Aduser (or the Quest equiv - get-Qaduser) command will easily get the user information and powershell will export to csv, xml, etc.

Your next best option are the DS* utilities (dsget, dssearch, etc) will find user info as well. They work well, but Powershell is the wave of the future and you'll find a lot of help for it these days.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.