Converting Properties into a Human Readable Form

Keywords: 	 converting properties display human readable

---

Question:

Thank you, oh thank you for creating the ADSI extender for winbatch. It will be my savior now that our W2K AD is close to production. I've written a ton of tools with winbatch and ADSI so far and one question is sticking in my mind.

I've written a short little program to query all a user object's properties in AD. Attached is the code and output file for the program. My question is when certain objects return ND (my lingo for not displayable). The user I log in as is a everything admin (enterprise, domain, local) and I've even made the account a schema admin as well. Why can't I get the values for these certain properties? There are many more ND properties when I query a W2K AD with LDAP://. Thanks! Keep up the great job!

Answer:

The short answer is that the ADSI extender does not know how to convert some properties to a human readable form. The next version of the extender will be able to handle the conversion of more properties.

Some of the additional properties we will handle in the Win2k/AD environment are:

accountExpires
badPasswordTime
lastLogon
fastLogoff
lockoutTime
pwdLastSet
objectGUID
schemaIDGUID
attributeSecurityGUID
objectSID

---

Article ID:   W14509

Filename:   Converting Properties to a Human Readable Form.txt