Get vasco token attributes

[cerruti1881]

We use vasco tokens in an enterprise environment.

The after installing VACMAN Middleware Active Directory add-in, I can assign token to AD users.

Now, I need to write a script so that when you input a AD user account name, it could output the token serial number that assigned to the user.

I found the attribute in Hyena called: vasco-LinkUserToDPToken, it has a value like "CN=2269993987,OU=Users,OU=Finance Department,DC=ABC,DC=com,DC=au"

I tested in PowerShell:

PS C:\Windows\system32> Get-ADUser "TEST001" -Properties vasco-LinkUserToDPToken

DistinguishedName : CN=TEST001,OU=Users,OU=Finance Department,DC=ABC,DC=com,DC=au
Enabled : True
GivenName : TEST001
Name : TEST001
ObjectClass : user
ObjectGUID : 686f7bef-82ac-4735-a502-03c09a502d42
SamAccountName : TEST001
SID : S-1-5-21-815100918-1079928561-1238779560-438854
Surname :
UserPrincipalName : TEST001@ABC.com.au
vasco-LinkUserToDPToken : {CN=2269993987,OU=Users,OU=Finance Department,DC=ABC,DC=com,DC=au}

So I tried to use the following VB Scripts:

strFullLDAPName = "CN=TEST001,OU=Users,OU=Finance Department,DC=ABC,DC=com,DC=au"
Set objUser = GetObject(strFullLDAPName)
strTokenNo = objUser.vasco-LinkUserToDPToken
Wscript.Echo "Assigned Token No: " & strTokenNo

However, the above didn't return any value.

Can anyone find out a way of displaying that value?


Here is the VACMAN reference manual:

VACMAN_Middleware_Administration_Reference_A4.pdf

I think page 17-19 discussed the Active Directory Schema.

Your help is much appreciated.

PS: I have reason not to use PowerShell script instead of VBScript, because the above is part of an account snapshot VBScript with over 1000 lines. I just don't want to re-write it now.