Active Directory Report

Hi,
I need to make a report that reads from my company's active directory and shows all active directory groups and their users... in addition i need it to be able to update automatically when someone adds a user in our active directory, anyone know a query that would allow this to happen?
- Daniel

So are you saying your requirement is that you must access the Active Directory via Oracle? If so, have you considered DBMS_LDAP?
Without knowing any other requirements wouldn't it be easier for the System/Network administrator to generate this report?
Edited by: Centinul on Jan 9, 2009 9:32 AM
I am guessing this is similar if not a duplicate thread to the one you created the other day: Re: LDAP

Similar Messages

  • Free JOSE Active Directory Reporting tool in English available!!!

    Hello,
    this FREE tool is in German language a long time available.
    NOW the English version is ready for use also. Please check if it is an option for your work.
    http://www.faq-o-matic.net/2013/08/12/jos-active-directory-reporting-english-version-is-live-now/
    Best regards
    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/
    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

    Hello,
    I was surfing the threads to see what is going on until I saw this posts and I was stopped to download this tool. It is a great tool Meinolf ! I downloaded it and trying to check all the reports. So far so good my friend. Also I was amazed once I saw the
    nice "Trust Relationship" icon. Every time I run this tool I will definitely check for Trust Relationships first. :)
    In addition I was wondering how it is possible to inform you about a method in order to improve the design in this tool? 
    Regards.
    Mahdi Tehrani   |  
      |  
    www.mahditehrani.ir
    Please click on Propose As Answer or to mark this post as
    and helpful for other people.
    This posting is provided AS-IS with no warranties, and confers no rights.
    How to query members of 'Local Administrators' group in all computers?

  • Active directory report getting Database Vendor Code: -2147217911

    Hello,
    I've created a report with CR 2008 to query some user names from Active Directory  (Windows 2008 R2)
    The report works fine on my computer (with my user)
    works fine when I deploy it to BO XI 3.1.
    But doesn't work when I schedule it.
    I don't change the database logon user when scheduling. (it's the same when I run it online successfully)
    I get the following error
    Error in File ~tmp459c68e0c50eda0.rpt: Failed to retrieve data from the database. Details: [Database Vendor Code: -2147217911 ]
    what can I do?
    Thank you
    Erman Ulusoy
    Edited by: erman ulusoy on Apr 11, 2011 2:39 PM

    So here is the answer,
    I've forgot to uncheck save data with report. So the report was not working also on BO.
    So with a domain user it has worked.
    thank you

  • Active directory reporting tool

    Hi ALL,
           Anyone could help me in finding reporting tools for Active directory
    Thanks

    Are you looking for real time monitoring tool or health checkup tool. Event viewer can be used to find the issues in the DC's.
    DCDIAG is best tool to analyze the health of the AD, Repadmin for monitoring replication, DNSlinit for DNS etc.
    What does DCDIAG actually… do?
    http://blogs.technet.com/b/askds/archive/2011/03/22/what-does-dcdiag-actually-do.aspx
    For GPO AGPMC(Advanced group policy management console), GPinventory etc can be used.
    For FRS/DFSR, you can use FRSDIAG tool, SONAR etc.
    http://msmvps.com/blogs/ad/archive/2008/06/03/active-directory-health-checks-for-domain-controllers.aspx
    http://technet.microsoft.com/en-us/library/cc180912.aspx
    For real time monitoring tool, you can use
    SCOM (System center operations manager)2007 R2, you can also have audit collection service with SCOM. 
    http://www.microsoft.com/download/en/details.aspx?id=21357 
    There are other 3rd party tools like Netwrix, Quest, Admanager plus etc.
    Regards
    Awinish Vishwakarma
    MY BLOG:
     http://awinish.wordpress.com
    This posting is provided AS-IS with no warranties/guarantees and confers no rights.

  • Windows Server 2008 R2 Active Directory Report Tool

    I have some computers in 2K8 R2 AD that are no longer in use in our organization. I would like to run a report to see which computers in our AD structure have reported to AD within a certain amount of time so I will know whether to delete them or not.
    Is there a tool I can use specifically to see if computers in our AD domain have logged in within a certain time frame?

    You can use my script here: https://gallery.technet.microsoft.com/scriptcenter/Remove-Inactive-user-2caf199a
    All you need to change is
    (objectCategory=person)(objectClass=user)
    by
    (objectCategory=computer)
    and add a comment at the beginning of the command Remove-ADUser.
    This posting is provided AS IS with no warranties or guarantees , and confers no rights.
    Ahmed MALEK
    My Website Link
    My Linkedin Profile
    My MVP Profile

  • Active Directory 2008 and Crystal Reporting

    Hello,
    My company is planning to upgrade to Active Directory 2008 R2. But before we do so, we must understand how our servers & applications interact/work with Active Directory 2008 R2. Could you please answer the following questions in regards to your application Crystal Reporting (version 10):
    1.     How does Crystal Reporting interact with Active Directory (AD)?
    2.     Is there a specific domain controller hardcoded with Crystal Reporting ?
    3.     Does Crystal Reporting support Active Directory 2008 R2?
    Your assistance and timely response with this matter is very much appreciated. Thank you.
    - Peter

    Hi Peter,
    Crystal Reports is a standalone install on the local Work Station. AD won't affect it. Unless there is some info you are telling us about how you access CR?
    Thank you
    Don

  • How to authenticate user in Active Directory for an Oracle report

    Hey there,
    We have users of 1 report all over the country.
    Currently, when using the report, the user chooses a location as a parameter, then runs the report.
    The problem is we don't want the user to be able to see data from other locations, only their own.
    So how can I do this as all users are set up in Active Directory, but the only thing that distinguishes them apart is under the Properties of the user, under the General tab, the Office field says where they are located.
    Thanks in advance!

    Hey there,
    We have users of 1 report all over the country.
    Currently, when using the report, the user chooses a location as a parameter, then runs the report.
    The problem is we don't want the user to be able to see data from other locations, only their own.
    So how can I do this as all users are set up in Active Directory, but the only thing that distinguishes them apart is under the Properties of the user, under the General tab, the Office field says where they are located.
    Thanks in advance!

  • Report on Active Directory User Attributes in SCCM 2012

    I need to output a list of all users in a collection, along with certain user attributes from Active Directory. I can get part of what I need with the following query:
    SELECT v_FullCollectionMembership.ResourceID,
    v_R_User.Windows_NT_Domain0,
    v_R_User.Distinguished_Name0,
    v_R_User.Full_User_Name0,
    v_R_User.Mail0,
    v_R_User.User_Name0
    FROM v_FullCollectionMembership, v_R_User
    WHERE v_FullCollectionMembership.ResourceID = v_R_User.ResourceID
    AND v_FullCollectionMembership.CollectionID = 'SMS00002'
    If possible I need to add:
    Last logon timestamp
    User account status (enabled or disabled)
    I have added "lastLogon" and "lastLogonTimestamp" as additional attributesunder Active Directory User Discovery. This discovery method is enabled and I have run a full discovery about a month ago, and again today. I read in
    another thread that these attributes should appear in the table v_R_User, however they have not. Is v_R_User the right place to look for this or is there another view or table I can query?
    Once I have the above sorted out, how can I find the user account status in SCCM? I have done reports in the past directly from AD and used the 'useraccountcontrol' attribute and I noticed there is a column named 'User_Account_Control0' in v_R_User, however
    the values do not match those found in Active Directory.
    Thanks.

    Have you checked the attribute from the Active Directory in decimal format? Check that and compare it to the value ConfigMgr has stored in its 'User_Account_Control0'...
    User Account Control tells you multiple things of the account, for example does the account have "Smart card login required" -option checked from the account properties.
    The tricky part here is to actually get the report show you what you really want, because "useraccountcontrol" -attribute is a numeric value, you have to calculate what decimal combination means what in readable text.
    More info on the attribute can be found from here
    http://support.microsoft.com/kb/305144 and from there you can also find the values for different settings. For example:
    account is enabled = 512
    account is disabled = 514
    account is enabled with smart card = 262656

  • SCCM report to show last logged on user and the Active Directory department attribute of that user.

    I need to create an SCCM report to show last logged on user on all machines and the Active Directory department attribute of that last logged on user.

    You problem is here.
    right
    join v_R_User USR on USR.ResourceID
    = CS.ResourceID
    USR.ResourceID != CS.ResourceID, you need to map the username to the user logon to the PC. By using the user’s department information you will
    end up with unreliable results.
    Anyways you need to make these changes to your query.
    left
    join v_R_User USR on USR.Unique_User_Name0
    = CS.UserName0
    http://www.enhansoft.com/

  • User login report in Active Directory for specific date and time

    I want to get User login report in Active Directory for specific date and time e.g user logged in at15-01-2015 from 8:00am to 4:00pm
    Is any query, script or any tool available?
    Waiting for reply please

    You can identify the last logon date and time using my script here: https://gallery.technet.microsoft.com/scriptcenter/Get-Active-Directory-User-bbcdd771
    If you would like to get back in time and see when the user did a logon / logoff then you need to have auditing enabled. Once done, you can records from Security log in the event viewer: https://social.technet.microsoft.com/Forums/windowsserver/en-US/98cbecb0-d23d-479d-aa65-07e3e214e2c7/manage-active-directory-users-logon-logoff-events
    I have started a Wiki about how to track logon / logoff and it can help too: http://social.technet.microsoft.com/wiki/contents/articles/20422.record-logon-logoff-activities-on-domain-servers-and-workstations-using-group-policy.aspx
    This posting is provided AS IS with no warranties or guarantees , and confers no rights.
    Ahmed MALEK
    My Website Link
    My Linkedin Profile
    My MVP Profile

  • SMS_AD_SECURITY_GROUP_DISCOVERY_AGENT - Active Directory Security Group Discovery Agent reported warnings for 524 object(s). DDRs were generated for 0 object(s) that had warning(s) while reading non-critical properties.

    Hi, can anyone help me troubleshoot the following please:
    Active Directory Security Group Discovery Agent reported warnings for 524 object(s). DDRs were generated for 0 object(s) that had warning(s) while reading non-critical properties. DDRs were not generated for 524 object(s) that had warnings while reading
    critical properties.
    Possible cause: OU name or Security Group name may contain at least a Unicode character which has conversion problem between Unicode and your system ANSI locale(e.g. Korean characters in English System Locale). The site server might not have access to
    some properties of this object. The container specified might not have the properties available.
    Solution: Please verify the Active Directory schema for properties that are not replicated or locked. Refer to the discovery logs for more information.
    Does the error relate to 524 security groups? There are several invalid search paths listed in adsgdis.log, are these related?
    Thanks,
    Dale

    You'll have to examine the log to determine exactly which objects its referring to. Although this is in the context of group discovery, group discovery still creates DDRs for computer objects within those groups so it could be either groups or computers.
    This is not a search path issue though as it's clear that the discovery process found 524 different objects, but as stated, it could not properly read criticial properties of those objects and thus did not create DDRs for them.
    As mentioned, reading the log in detail will list the objects individually and the reason it could not create a DDR for it.
    Jason | http://blog.configmgrftw.com

  • Crystal Reports 2008 - Report off of Active Directory

    Hello,
    I have found a few articles on how to do this, but they don't seem to follow my wizard.
    Can someone provide a tutorial on how to create a Crystal Reports 2008 report against active directory?
    I have been able to do the following so far:
    1) Create new OLE DB (ADO) connection
    2) From Provider, choose OLE DB Provider for Microsoft Directory Services.
    3) The fields I have are Data Source, User ID, and Password.
       - I do not have a field for "LOCATION" that is referenced in documentation I have found on here.
    4) I enter my server.domain.com:389 for active directory, a valid username and password.
    5) It seems to create the connection, and wants me to ADD COMMAND. I haven't been able to find a command that actually works online. Does anyone have one? I.e.: Employee and Supervisor names.
    Thank you,
    Lin

    backing up a step or two, make sure that the username you are using has a domain alias infront of it, something like "mydomain\myusername" should be the correct format. even if you don't get an error when you create the connection it may be incorrect. when entering in a command is the only time it actually tries to authenticate against the AD server. If you make a mistake when entering in the original connection (anytime before the add command part) remember that you will need to exit out of Crystal Reports and come back in. the connection can not be remade or edited once entered.
    Now, as for what to put into the query, you will probably need to talk with your windows AD administrators. the one I used for my organization was something like this (replace the stuff between the <> marks with your data):
    SELECT samaccountname, sn, givenname, mail FROM 'LDAP://OU=<yourOU>,DC=<yourdomain1>,DC=<yourdomain2>'
    remember you can not use * to get data, it seems to take what ever properties you directly name. if you need names of properties or items to call, I'd recommend a quick google search on LDAP SQL queries.
    I hope this helps

  • Active Directory Plugin for Crystal Reports Server XI

    Post Author: pkhot
    CA Forum: Deployment
    Hello,
    I Installed Crystal Reports Server XI on a test W2K3 R2 machine. When I try to logon using the Business View Manager or the Administrator LaunchPad, selecting the Active Directory Authentication I get an error saying secWinAd plugin is not available. How do i fix this?
    Is there a plugin available and if yes where can i download it from?
    Any help will be greatly appreciated.
    thanks

    Did you lon on to the console and go to authentication-> windows ad and enter in your domain info ?

  • Crystal Reports and Windows Active Directory

    Hi,
    I am trying to authenticate using the Windows Active Directory. I have created a test group in the Active directory and added myself as a member to that group. On the Crystal reports server side, I have enabled the Windows Active Directory. I can see the group that I created on the Active Directory. But I do not see any users. I have a Java infoview and I changed the web.xml file. I changed the authentication parameter to secWinAD. But does anyone know how to restart the web application server? I restarted the service Intelligent Agent. But when I login using my user id and password it still gives me the same error:
    Account Information Not Recognized: Enterprise authentication could not log you on. Please make sure your logon information is correct. (FWB 00008)
    Any help will be appreciated.
    Thanks.

    Infoview doesn't even need to be restarted.
    You said "I have a Java infoview and I changed the web.xml file" in your original post
    If you have .net IIS then it would be a web.config file that needs to be changed. IIS will pick up the changes as soon as you save the file and open an infoview logon page. you may also opt to set authentication.visible to true so users will have the ability to select AD when logging in.
    Regards,
    Tim

  • BOBJ SAP Integration with Active Directory SSO via Portal

    Hi all,
    We are only interating BOBJ with BW/BI and the user experience is as follows:
    Users login to the SAP Portal using their Windows Active Directory user id and password to gain access to the portal.
    From my understanding at the moment, the way the interation kit works is that the BOBJ system is configured as per the manual importing the SAP roles and SAP users who will access the Crystal reports via either GUI or Portal.
    My question is: When creating a Crystal report is created, the connection details use SAP login credentials and in the CMC the SSO option can be set so that the SAP user who has logged onto GUI or Portal can launch the report... this is fine and works as intended taken that the user logged on with his/her SAP login. As per the user experience above, users log in using their AD Login into Portal, and never use GUI, where this in theory is SSO into Portal. So how does one get past the login screens (BOBJ and database) while preserving AD SSO to SAP and BOBJ?
    Any guidance, documents or comments will be much appreciated.
    Thanks
    Jacques

    HI,
    yes it is possible:
    take a look at the blogs I did on the install and configuration (specially the SAP Authentication):
    BusinessObjects and SAP - Installation and Configuration Part 1 of 4
    Install Part #1
    BusinessObjects and SAP - Installation and Configuration Part 2 of 4
    Install Part #2
    BusinessObjects and SAP - Installation and Configuration Part 3 of 4
    Install Part #3
    BusinessObjects and SAP - Installation and Configuration Part 4 of 4
    Install Part #4
    BusinessObjects and SAP - Configure SAP Authentication
    SAP Authentication
    Important here is that:
    - the BI System is configured to accept tickets
    - the portal and BI system are configured as trusted system
    - the SAP authentication is configured
    Ingo

Maybe you are looking for