Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Need to modify an ADUC LDAP filter. It's not working.

Status
Not open for further replies.
Feb 11, 2005
153
US
Okay I have a filter for my AD Users and computers mmc-

(&(objectCategory=computer)(pwdLastSet<=127936116000000000))

Where I find the interger of the date in this case it happens to be 6/1/2006 and put it into the password last set field. The problem is we have alot of roaming people and this is a domain running in Mixed mode for 2000 and 2003 AD.

I also use another filter -

(&(objectCategory=computer)(LastLogon<=128041524000000000))

Where I find the interger again of a date in this case its 10/1/2006 and put it into the logon field.

BOTH of the above examples work flawlessly....

I tried doing -

(&(objectCategory=computer)(pwdLastSet<=127936116000000000)(LastLogon<=128041524000000000))

Where it only shows me the computers that have accounts with passwords not set since 6/1/2006 and have not been logged into since 10/1/2006. But the results turn up with no machine names at all. I know this to be untrue because I know some of the machines that both queries return are the exact same machine names.

Is there something wrong with how I am adding to the query?
 
I think I found the answer but can someone please verify?

(&(objectCategory=computer)(LastLogon<=128041524000000000))(&(objectCategory=computer)(pwdLastSet<=127936116000000000))
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top