Og her får du lige koden til AD:
-------------------------------------------------------
Locating All the Disabled User Accounts in Active Directory
Description
Returns a list of all disabled user accounts in the fabrikam.com domain.
-----------------------------------------------------------------
Supported Platforms
Windows XP Yes
Windows Server 2003 Yes
Windows 2000 Yes
Windows NT 4.0 No
Windows 98 No
-----------------------------------------------------------------
Script Code
-----------------------------------------------------------------
Const ADS_UF_ACCOUNTDISABLE = 2
Set objConnection = CreateObject("ADODB.Connection")
objConnection.Open "Provider=ADsDSOObject;"
Set objCommand = CreateObject("ADODB.Command")
objCommand.ActiveConnection = objConnection
objCommand.CommandText = _
"<
GC://dc=fabrikam,dc=com>;(objectCategory=User)" & _
";userAccountControl,distinguishedName;subtree"
Set objRecordSet = objCommand.Execute
intCounter = 0
While Not objRecordset.EOF
intUAC=objRecordset.Fields("userAccountControl")
If intUAC AND ADS_UF_ACCOUNTDISABLE Then
WScript.echo objRecordset.Fields("distinguishedName") & " is disabled"
intCounter = intCounter + 1
End If
objRecordset.MoveNext
Wend
WScript.Echo VbCrLf & "A total of " & intCounter & " accounts are disabled."
objConnection.Close
-----------------------------------------------------------------
The System Administration Scripting Guide, part of the Windows Server 2003 Resource Kit. For more information, contact scripter@microsoft.com.