Freigeben über


How to get a list of all users in an OU (VBScript)

Hi all, welcome back,

Today I'll post a very straight forward sample which gets a list of all users in an Organizational Unit (OU) in Active Directory (AD) using VBScript:

 ' Get OU
'
strOU = "OU=Users,DC=domain,DC=com"

' Create connection to AD
'
Set objConnection = CreateObject("ADODB.Connection")
objConnection.Open "Provider=ADsDSOObject;"

' Create command
'
Set objCommand = CreateObject("ADODB.Command")
objCommand.ActiveConnection = objConnection
objCommand.Properties("Page Size") = 1000

' Execute command to get all users in OU
'
objCommand.CommandText = _
  "<LDAP://" & strOU & ">;" & _
  "(&(objectclass=user)(objectcategory=person));" & _
  "adspath,distinguishedname,sAMAccountName;subtree"
Set objRecordSet = objCommand.Execute

' Show info for each user in OU
'
Do Until objRecordSet.EOF

  ' Show required info for a user
  '  
  WScript.Echo objRecordSet.Fields("adspath").Value
  WScript.Echo objRecordSet.Fields("distinguishedname").Value
  WScript.Echo objRecordSet.Fields("sAMAccountName").Value

  ' Move to the next user
  '
  objRecordSet.MoveNext

Loop

' Clean up
'
objRecordSet.Close
Set objRecordSet = Nothing
Set objCommand = Nothing
objConnection.Close
Set objConnection = Nothing

 

I hope this helps.

Regards,

 

Alex (Alejandro Campos Magencio)

Comments

  • Anonymous
    April 23, 2008
    just curious why your starting these vbscript samples why not powershell?

  • Anonymous
    April 23, 2008
    That's a good question... Many, many people are still using VBScript out there. Additionally, PowerShell is not supported on Windows 2000, for instance, and I have many customers using that OS. But you are right and I should post something on PowerShell. Right now I'm posting real issues or questions that customers raised to me in the past few weeks, and nobody has ever requested a PowerShell sample to me, for instance. So I have none. I should start offering them PowerShell as an alternative. This way I may get some samples to post ;-) Thx a lot for your comment! Appreciated! Cheers, Alex

  • Anonymous
    April 24, 2008
    its true that its not supported on w2k but you don't have to run it on a w2k device run it on xpvista2003 against a remote w2k device.. but I do understand what your saying otherwise!tr

  • Anonymous
    April 24, 2008
    And additionally, some customers use these VBScript samples in their ASP applications. Unfortunately for them, not everybody is using ASP.NET yet...

  • Anonymous
    June 05, 2008
    Thank you for posting this script I have found it helpful. I do have a question though, I am using this as an ASP script to retrieve the list of users from our Active Directory. I found a listing of AD fields but when I substitue "givenname" or "dispalyname" for "distinguishedname" I get an error "Item cannot be found in the collection corresponding to the requested name or ordinal." Am I using the wrong field names? Thanks

  • Anonymous
    March 04, 2009
    Hello Alex this is very usefull script in my thought.I just want to try your script for test in my LAB.but i'm not much know about scripting languange, can you tell me what is the outcomes for your script?? it is generated a file (for example txt file)??Please give me the light for this,

  • Anonymous
    March 04, 2009
    o yeah please write me an email, if you dont mind.my email : lemmy_102@yahoo.comThanks

  • Anonymous
    March 04, 2009
    The script is just showing the results on the screen.Cheers,Alex

  • Anonymous
    March 11, 2009
    Hi, could you help me, This script is very useful for me, but i need to get one more user info such as UserLast Logon Date and Time. When I tried to append this request to the script above, I walked into problems with timestamp format... Thanks in advance for any answer. revere@fjfi.cvut.cz

  • Anonymous
    March 11, 2009
    If you want to get LastLogon, check this other post of mine:How to get LastLogon property for all users in a Domain (VBScript)http://blogs.msdn.com/alejacma/archive/2009/03/12/how-to-get-lastlogon-property-for-all-users-in-a-domain-vbscript.aspxI hope this helps.

  • Anonymous
    March 11, 2009
    Many thanks for your answer. All what I need is to get LastLoginInfo (Time and Date) for all users in one OU in Domain. I can't program in VBscript and can't find any relevant tool in Windows 2000/2003. Your script (the first used) doesn't display the LastLogon Value and the second one is working and working, till I'll break it :-)) . Well, I think it's serching for all users in AD ... Thanks

  • Anonymous
    September 23, 2009
    does the output comes in a txt file ?

  • Anonymous
    December 28, 2009
    The comment has been removed

  • Anonymous
    December 28, 2009
    Anand, if you need help to develop such a script, I suggest you contact Microsoft Technical Support. I'm afraid I cannot create samples on demand...

  • Anonymous
    April 30, 2010
    How to list users from ou/sub ou using vb script.

  • Anonymous
    February 05, 2012
    Hi your script is very good...but i want a script which gives active enabled users information from Active directory.I want the information as below mentioned fields:-First NameLast NameNT IDRegion and SiteEmail IDPPS IDFull AddressI want the output in a excel sheet and mainly i will be running the script remotely.Please help me...If you can give me the script with above mentioned details,i will be very very great full to you.Thanks,Bhaskar

  • Anonymous
    February 05, 2012
    you can  send me the script to my mail aslo bhaskar.v25@gmail.com    Waiting for your reply.It will b every much helpfull for me if you cna do the script

  • Anonymous
    February 05, 2012
    Sorry bhaskar, but I'm afraid I cannot attend those kind of demands. Not enough free time. If you need help, I suggest you open a support case with us, Microsoft Technical Support. We are not allowed to do custom code for our customers, but we can provide with assistance and samples to do what you need if you open an Advisory case, which will be paid by the hour (and note that in many regions, only customers with a Premier account are able to open those kind of cases). Thx for your understanding.Regards,Alex