MK2-风 之谷 - Active Directoryhttp://www.mk2leo.com/大家来学习编程吧 - RainbowSoft Studio Z-Blog 1.8 Arwen Build 90619zh-CNMK2-风版权所有.Tue, 07 Sep 2010 12:12:24 +0800AD 批处理用户登录限制 (原创)mk2leo@qq.com (leoling504)http://www.mk2leo.com/post/43.htmlTue, 11 Nov 2008 23:27:43 +0800http://www.mk2leo.com/post/43.html辛苦了一整日找资料..总於在外国网站看到一小篇关於用脚本设置域用户登录远程桌面的限制.这个真找得辛苦.再配合其他站的教程.

才整理出这个寻找整个OU对像下的用户.把登录限制取消掉..要不然.400多个用户.一个一个点.起码要几个小时了....

代码如下

Const ADS_SCOPE_SUBTREE = 2
Const ADS_PROPERTY_CLEAR = 1
Set objConnection = CreateObject("ADODB.Connection")
Set objCommand = CreateObject("ADODB.Command")
objConnection.Provider = "ADsDSOObject"
objConnection.Open "Active Directory Provider"
Set objCommand.ActiveConnection = objConnection
objCommand.Properties("Page Size") = 1000
objCommand.Properties("Searchscope") = ADS_SCOPE_SUBTREE
objCommand.CommandText = _
"SELECT cn FROM 'LDAP://ou=要找的OU,dc=你的域名称,dc=com' WHERE objectCategory='user'"
Set objRecordSet = objCommand.Execute
objRecordSet.MoveFirst
Do Until objRecordSet.EOF
Set objUser = GetObject _
("LDAP://cn="&objRecordSet.Fields("cn").Value&",ou=要找的OU,dc=你的域名称,dc=com") 
objUser.PutEx ADS_PROPERTY_CLEAR, "userWorkstations",""
objUser.SetInfo
objRecordSet.MoveNext
Loop
 

大家只要修改一下OU和DC为你的域资料.就能把OU组中的用户登录限制取消.大家也可以修改一下DO UNTIL下的代码.做成其他功能.AD对像的属性.我也开了一个帖例出来了.大家可以跟着修改.代码注释就免了.没人看.注了也白费.有需要的就留言吧...

 

 

]]>Active Directoryhttp://www.mk2leo.com/post/43.html#commenthttp://www.mk2leo.com/http://www.mk2leo.com/feed.asp?cmt=43http://www.mk2leo.com/cmd.asp?act=tb&id=43&key=c70d9838備份和恢复 Active Directorymk2leo@qq.com (leoling504)http://www.mk2leo.com/post/42.htmlTue, 11 Nov 2008 04:11:51 +0800http://www.mk2leo.com/post/42.html这个是命令方法.最简单的了

如何備份Active Directory中使用命令行

您可以執行備份的Active Directory的命令行使用Ntbackup會命令行實用工具。 這種辦法可以作為替代品使用備份實用工具。

若要使用Ntbackup會命令行實用程序來執行備份，

  1. 單擊開始，運行，輸入指令在運行對話框中。 單擊確定。
  2. 您可以使用下面的命令和選項來備份系統狀態數據：
    • ntbackup backup systemstate /J ‘Backup Job’ /F ‘C:\backupfile.bkf’
      • ntbackup ，表明了Ntbackup會命令行備份工具
      • backup指定備份應當
      • systemstate規定，最新的數據系統應該備份
      • J ，界定的名字備份工作
      • F定義名稱的備份文件

如何執行主還原的Active Directory

  1. 重新啟動域控制器。
  2. 在啟動期間，按下F8提示時，然後選擇目錄服務還原模式（ Windows議會只）由Windows高級選項菜單。 按Enter 。
  3. 選擇作業系統，應該開始。 按Enter 。
  4. 當安全模式登錄提示出現時，輸入適當的本地管理員帳戶信息，然後單擊確定。
  5. 單擊確定時，會出現訊息，建議Windows是運行在安全模式。
  6. 單擊開始，所有程序，附件，系統工具，然後單擊備份。
  7. 最初的網頁備份或還原嚮導，單擊下一步。
  8. 確保還原文件和設置選項已被選中的備份或還原頁。 單擊下一步。
  9. 關於如何還原頁上，選擇備份您要使用的小學恢復過程。 單擊下一步。
  10. 單擊高級。
  11. 在哪裡還原頁上，留下的默認設置的原始位置，保持不變，然後單擊下一步
  12. 關於如何還原頁上，選擇取代現有檔案的選擇。 單擊下一步。
  13. 當高級還原選項的網頁出現，使當恢復複製的數據集，紀念恢復數據作為原始數據的所有副本複選框。 您可以離開所有其他默認設置，在高級還原選項頁不變。
  14. 單擊下一步。
  15. 單擊完成小學開始恢復的Active Directory 。
  16. 重新啟動服務器。

步驟1
啟動「製作備份」工具，選擇「備份檔案及設定」的選項開始AD設定的備份。

 

步驟2
由於我們的備份需求以備份AD設定為主，選擇下方選項，手動選取想要備份的資料。

 
步驟3
在System State」的項目之下，點選之後，可以看到「Active Directory」的備份選項。

 

步驟4
這裡必須指定檔案匯出之後的存放位置，可以是本機硬碟，也可以是共享資料夾。

 

步驟5
尚可以透過進階選項，設定是否要啟用差異性備份等其他模式備份AD設定。

 

步驟6
備份過程中，工具會顯示完成備份工作的所需時間，以及目前的進度等相關資訊。

 

步驟7
以「目錄還原模式」進入Windows系統，這是AD專用的安全模式。

 

步驟8
將備份檔的資料還原到系統重新開機，就可以在AD的管理介面看到先前的各項變更。

 


 

]]>Active Directoryhttp://www.mk2leo.com/post/42.html#commenthttp://www.mk2leo.com/http://www.mk2leo.com/feed.asp?cmt=42http://www.mk2leo.com/cmd.asp?act=tb&id=42&key=d5c15660Active Directory的用户属性说明 mk2leo@qq.com (leoling504)http://www.mk2leo.com/post/40.htmlTue, 11 Nov 2008 00:14:15 +0800http://www.mk2leo.com/post/40.html
Active Directory中User对象属性
 
User Object User Interface Mapping

The following tables identify the property pages supplied by the Active Directory Users and Computers snap-in. Each table identifies the user interface elements of the property page and the Active Directory attribute associated with that user interface element. Because the property pages that are displayed by the Active Directory Users and Computers snap-in can be extended, it is not possible to provide this data for all of the pages displayed in a property sheet.

General Property Page

 

The following table lists UI labels of the General property page.

* UI label Active Directory attribute
* First Name givenName
* Last Name sn
* Initials initials
* Description description
* Office physicalDeliveryOfficeName
* Telephone Number telephoneNumber
* Telephone: Other otherTelephone
* E-Mail mail
* Web Page wwwHomePage
Web Page: Other url

 

Account Property Page

 

The following table lists the UI labels of the Account property page.

UI label Active Directory attribute Comment
* UserLogon Name userPrincipalName This field is taken from everything in the userPrincipalName attribute that preceeds the last '@' character. The last '@' character and everything after it is placed in the suffix combo box.

* User logon name (pre-Windows 2000) sAMAccountname No comment.

* Logon Hours logonHours No comment.
* Log On To logonWorkstation No comment.

* Account is locked out lockoutTime and lockoutDuration If the lockoutTime attribute is not zero, the lockoutDuration attribute is added to lockoutTime and compared to the current date and time to determine if the account is locked out.

* User must change password at next logon pwdLastSet No comment. User cannot change password N/A This is the Change Password control in the ACL.

* Other Account Options userAccountControl The remaining items in Account Options toggle bits in the userAccountControl attribute bitmask (flags in a DWORD).
* Account Expires accountExpires The Account Expires control displays the date that the account will expire at the end of. The accountExpires attribute is stored as the date that the account expires on. Because of this, the date displayed in the Account Expires control will be displayed as one day earlier than the date contained in the accountExpires attribute.

 

Address Property Page

 

The following table lists the UI labels of the Address property page.

UI label Active Directory attribute Comment
* Street streetAddress No comment.
* P.O.Box postOfficeBox No comment.
* City l The l attribute name is a lowercase "L" as in Locale.
* State/Province st No comment.
* Zip/Postal Code postalCode No comment.
* Country/Region c, co, and countryCode No comment.

 

Member Of Property Page

 

The following table lists UI labels of the Member Of property page.

UI label Active Directory attribute Comment
* Member of memberOf No comment.
* Set Primary Group primaryGroupID
* LDAP: Tied to primaryGroupToken of the primary group.

 

Organization Property Page

 

The following table shows the UI labels of the Organization property page.

UI label Active Directory attribute Comment
* Title title No comment.
* Department department No comment.
* Company company No comment.
* Manager:Name manager No comment.
* Direct Reports directReports No comment.

 

Profile Property Page

 

The following table lists the UI labels of the Profile property page.

UI label Active Directory attribute Comment
* Profile Path profilePath No comment.
 * Logon Script scriptPath No comment. Home Folder:
* Local Path homeDirectory If Local path is selected, the local path is stored in the homeDirectory attribute.
* Home Folder: Connect homeDrive If Connect is selected, the mapped drive is stored in the homeDrive attribute. Home Folder: To homeDirectory If Connect is selected, the path is stored in the homeDirectory attribute.

 

Telephones Property Page

 

The following table lists the UI elements of the Telephones property page and their corresponding Active Directory attributes.

UI label Active Directory attribute
* Home homePhone
* Home: Other otherHomePhone
* Pager pager Pager:
* Other otherPager
* Mobile mobile
* Mobile: Other otherMobile
* Fax facsimileTelephoneNumber
* Fax: Other otherFacsimileTelephoneNumber
* IP phone ipPhone
* IP phone: Other otherIpPhone Notes info

 

Environment, Sessions, Remote Control, and Terminal Services Profile Property Pages

]]>Active Directoryhttp://www.mk2leo.com/post/40.html#commenthttp://www.mk2leo.com/http://www.mk2leo.com/feed.asp?cmt=40http://www.mk2leo.com/cmd.asp?act=tb&id=40&key=50f3739c