Question

how I should proceed to get all active PSOs on a specific domain.

I know that this domain contains the following PSOs:

CN=PSO-Standard
CN=PSO-Sensitive

But I must create a report to display them so I must load them in dynamic way.

I guess there is a kind of filter to get the PSO container and then loop through its recordset.

e.g.

.filter = "(CN=Password Settings Container)"

.attributes = "msDS-PasswordSettingsContainer"

thx in advance.

using classic asp with vbscript

Answer 1

The filter you are looking for is : “(objectClass=msDS-PasswordSettings)”

Here is a sample Vbscript to test :

'==========================================================================
'
' NAME: SearchPSO.vbs
'
' AUTHOR: JPB , Silogix
' DATE  : 29/06/2011
'
' COMMENT: 
'
'==========================================================================
Option Explicit
Dim machine
Dim oRootDSE ' Root Directory Service Specific Entry
Dim DomainContainer ' The Roor of the Domain
Dim conn ' ADODB connexion
Dim ldapBase ' Base DN of the search
Dim ldapFilter ' Search filter
Dim ldapAttributes ' Attributs to get
Dim ldapScope ' Search scope
Dim ldapStr ' String to execute
Dim rs ' Search result
Dim f '
Dim oADSI ' ADSI access


' ADODB cooking
machine = "WM2008R2ENT"
Set oRootDSE = GetObject("LDAP://"&machine&"/"&"RootDSE")
DomainContainer = oRootDSE.Get("defaultNamingContext")

Set conn = CreateObject("ADODB.Connection")
conn.Provider = "ADSDSOObject"
conn.Properties("User ID") = "jpb"
conn.Properties("Password") = "test.2011"
conn.Properties("Encrypt Password") = True

conn.Open "ADs Provider"

' Building the request to exécute
ldapBase = "<LDAP://" & machine &"/"& DomainContainer & ">" 
ldapFilter = "(objectClass=msDS-PasswordSettings)"
ldapAttributes = "cn,msDS-LockoutDuration,msDS-MaximumPasswordAge"
ldapScope = "subtree"
ldapStr = ldapBase&";"&ldapFilter&";"&ldapAttributes&";"&ldapScope

' Search request execution
Set rs = conn.Execute(ldapStr)

' Restitution du résultat
While Not rs.EOF
  'For each f in rs.Fields
  '  WScript.Echo f.Name & ":" & f.Value
  'Next
  WScript.Echo rs.Fields("cn").Value
  rs.MoveNext
Wend