In need of a report tool for Active Directory.

Fredrik Landin

unread,

Oct 28, 2003, 7:47:23 AM10/28/03

to

What we are looking for is:

Create reports based on:

User membership in groups.

Cutom attributes (include or exclude).

Profile path, and so on.

There are probably hundreds of programs that do this, but witch are the good
ones?

Is there free programs from Microsoft that do this?

I'm grateful for hints in the right direction : )

Regards,

Fredrik

--

Tony Foster

unread,

Oct 28, 2003, 9:28:58 AM10/28/03

to

Not free, but as I learned at a Microsoft seminar I just attended -
absolutely wicked tools to get the most out of AD - by Quest software.
www.quest.com

A whole management suite of products to get more out of AD based on its
limitations, templates etc.

"Fredrik Landin" <lan...@home.se> wrote in message
news:OytSkGVn...@TK2MSFTNGP09.phx.gbl...

JC

unread,

Oct 28, 2003, 12:44:07 PM10/28/03

to

Hyena is the best.

"Fredrik Landin" <lan...@home.se> wrote in message
news:OytSkGVn...@TK2MSFTNGP09.phx.gbl...
>
>
>

Fredrik Landin

unread,

Oct 29, 2003, 2:28:54 AM10/29/03

to

Will check Hyena and Quest out, any more ideas?

--

Jimmy Andersson [MVP]

unread,

Oct 29, 2003, 6:12:23 AM10/29/03

to

What kind of reports are you looking for?

Regards,
/Jimmy
--
Jimmy Andersson, Q Advice AB
Microsoft MVP - Active Directory
---------- www.qadvice.com ----------

"Fredrik Landin" <lan...@home.se> wrote in message

news:O9PKQ5e...@TK2MSFTNGP10.phx.gbl...

Fredrik Landin

unread,

Oct 29, 2003, 3:34:07 PM10/29/03

to

Here is an example.

I want to know how many users (and who they are) that are members in
"OfficeXP_Users" group.
I may also ask the question like this:
I want to know how many users (and who they are) that are members in
"OfficeXP_Users" group that do not have any (or a specific) custom attribute
set.

I can "ask" these questions today, but I can't really save the questions the
way I want to... and the tool isn't for me personally, it's for our personal
department.
Today we use some scripts to get this info and it's saved in Excel, but it's
a long way from a "report tool" .. would be a dream for them to just "ask"
the question and then cut and past the info they want and report the
licensing info to whoever it's for....

So, any ideas?

Regards,
Fredrik

--

Jimmy Andersson [MVP]

unread,

Oct 29, 2003, 4:04:34 PM10/29/03

to

How about using Saved Queries in the MMC?

Regards,
/Jimmy
--
Jimmy Andersson, Q Advice AB
Microsoft MVP - Active Directory
---------- www.qadvice.com ----------

"Fredrik Landin" <lan...@home.se> wrote in message

news:ukrgCwln...@tk2msftngp13.phx.gbl...

Fredrik Landin

unread,

Oct 29, 2003, 4:50:36 PM10/29/03

to

Ehh... I know how dumb this sounds, can I save those to csv or textfiles?

You can tell this isn't my area right? ;-)

--

Fredrik Landin

unread,

Oct 29, 2003, 5:09:20 PM10/29/03

to

I do get the correct replies...
But how do I ask "List all memebers in a group"?

--

Jimmy Andersson [MVP]

unread,

Oct 29, 2003, 6:03:23 PM10/29/03

to

In the Saved Queries dialog, choose Custom Search.
I'll give an example; I want to list all users that are members of the
Domain Admins group:

(&(objectCategory=user)(name=*)(memberOf=CN=domain
admins,CN=users,DC=labdomain,DC=local))

BTW are you from Sweden, your name sounds swedish.

Regards,
/Jimmy
--
Jimmy Andersson, Q Advice AB
Microsoft MVP - Active Directory
---------- www.qadvice.com ----------

"Fredrik Landin" <lan...@home.se> wrote in message

news:OC83Olmn...@TK2MSFTNGP12.phx.gbl...

Jimmy Andersson [MVP]

unread,

Oct 29, 2003, 6:04:42 PM10/29/03

to

Yes, right-click the query and choose 'Export List...'

Regards,
/Jimmy
--
Jimmy Andersson, Q Advice AB
Microsoft MVP - Active Directory
---------- www.qadvice.com ----------

"Fredrik Landin" <lan...@home.se> wrote in message

news:ecs7wamn...@TK2MSFTNGP12.phx.gbl...

Jimmy Andersson [MVP]

unread,

Oct 29, 2003, 6:17:43 PM10/29/03

to

Actually, I just read my post again and you don't need the (name=*) part of
the query. So it should look like this:

(&(objectCategory=user)(memberOf=CN=domain
admins,CN=users,DC=labdomain,DC=local))

Sorry about that, I blame it on lack of sleep..... :)

Regards,
/Jimmy
--
Jimmy Andersson, Q Advice AB
Microsoft MVP - Active Directory
---------- www.qadvice.com ----------

"Jimmy Andersson [MVP]" <jimmy_...@mvps.org> wrote in message
news:ONLhDEnn...@TK2MSFTNGP12.phx.gbl...

Fredrik Landin

unread,

Oct 29, 2003, 6:26:35 PM10/29/03

to

Thanks dude!
I'll check it out tomorrow, to tired to think now.
We're both in Sweden, so it's past your bed time : )
I'm from Jönköping.

Drop me a mail if you like, delete the SPAM in the adress.
SfredPri...@sysMteam.se

--

Kevin Stanush

unread,

Oct 30, 2003, 9:24:45 PM10/30/03

to

Thanks for all for recommending our product, Hyena
(www.systemtools.com/hyena) to help in this area.

Hyena can be very useful in generating a list of the members of an
Active Directory group. Select as many as you want in Hyena right
window, right click, and select "View Group Members".

Be careful when trying to get this information using normal scripting
tools and even MMC. The group/user member listings are not maintained
well in Active Directory, due (in my opinion) to a strange design
quirk in AD. Put it simply, the user's primary group memberships
won't be reflected in the member's group listing, or the group
memberships. To see what I mean, try looking at the memberof
attribute for "Domain Users". Hyena will list all members of a group,
regardless of whether it by direct assignment or by primary group
assignment.

We also have a new exporting utility that we have under development
that will export any Active Directory information. It will be
available for release in December 2003.

Kevin Stanush
SystemTools Software Inc.
http://www.systemtools.com
Home of "Hyena" for Windows Administration

"Fredrik Landin" <lan...@home.se> wrote in message news:<OytSkGVn...@TK2MSFTNGP09.phx.gbl>...