AdFind - Command line Active Directory query tool for regular users

Summary

Command line Active Directory query tool. Mixture of ldapsearch, search.vbs, ldp, dsquery, and dsget tools with a ton of other cool features thrown in for good measure.

Security Requirements

There are no local security requirements for running AdFind. Information returned from Active Directory and AD/AM will be dependent on the security configured for the directory. Generally a normal Active Directory user can return a considerable amount of information from Active Directory while AD/AM tends to be more locked down.

I really like this tool

Redirect the output to a file and it should dump the whole dit in seconds. All I was really interested in was the dn, cn, mail, and displayNames, but I found I was able to see much more. Download it here.

Posted by admica   @   17 March 2009

Related Posts

Like this post? Share it!

Digg Twitter StumbleUpon Delicious Technorati Facebook RSS

1 Comments

Comments
Feb 17, 2010
10:10 am
#1 rich :

You’d like csvde even more: http://www.microsoft.com/downloads/details.aspx?FamilyId=9688F8B9-1034-4EF6-A3E5-2A2A57B5C8E4&displaylang=en
All one needs to be is a guest or user on the domain, and you can dump any domain you have a trust with as well, especially if you specify a GC/DC.
csvde.exe -s gc01.example.com -f example.com.csv

Leave a Comment

Name

Email

Website

Previous Post
« Basic networking from the command line: ifconfig, eth0, wifi0, routes
Next Post
How to put a picture link in your Outlook signature »
Powered by Wordpress   |   Lunated designed by ZenVerse