SecData

Summary

Command line Active Directory query tool to pull some of the important security attributes for user and computer objects and output in CSV format. I have seen a large number of scripts taking advantage of this tool  

Warranty

See warranty.

PlatForms

• Windows 2000 against Active Directory
• Windows Server 2003 against Active Directory
• Windows XP against Active Directory

Current Version

Version 2.3.0 - August 19, 2002

Modification(s) from previous version

• Added distinguishedName and accountExpires fields.
• Added -b option, -f option.

Security Requirements

There are no local security requirements for running secdata. Information returned from Active Directory will be dependent on the security configured for the directory. With most directory configurations a normal user can usually return the data properly.

Language

C++. Compiled with Borland Builder 6.0

Source Code Availability

None

Story

I needed a tool to help me find where accounts were getting locked out. I wanted to write something generic so that I could use it for other functions as well. So secdata was created. Very simply little LDAP query tool that grabs and outputs the following fields:

sAMAccountName	cn	distinguishedName	badPasswordTime	badPwdCount
lastLogon	logonCount	pwdLastSet	PwdAge	lockoutTime
accountExpires	createTimeStamp	ObjAge	modifyTimeStamp	ModAge
userAccountControl

The bolded attributes are generated by secdata based on some of the other attributes, for instance PwdAge is generated from pwdLastSet. Also userAccountControl is "decoded" in that it doesn't show you the raw useraccountcontrol, it shows you simple fragments that tell you the status such as NO_PWD_EXPIRE.
 

Download

You do not have to supply the email address. I would like you to fill that in though so that I have an idea on how popular a tool really is. If I see 1000 downloads with 900 different email addresses I know it is more widespread than one that has 1000 downloads and 200 different email addresses because the same person needed to keep downloading it for some reason.

Version History

• Update: Version 1.00.00 - 01/21/2001 - Original
• Update: Version 1.01.00 - 08/01/2001 - Fixed lockout calculation bug
• Update: Version 1.02.00 - 09/01/2001 - Fixed typo. Added cn to output.
• Update: Version 1.03.00 - 01/12/2002 - Added calculated PwdAge
• Update: Version 2.00.00 - 02/17/2002 - Complete restructure. Added computer enumeration.
• Update: Version 2.01.00 - 02/24/2002 - Add object creation/modification and calculated age attributes.
• Update: Version 2.02.00 - 06/13/2002 - Fixed null date 00/00/00 to 00/0000...
• Update: Version 2.03.00 - 08/19/2002 - Added distinguished name and account expires. Added -b and -f.

As seen in

• http://www.jsiinc.com in tips and tricks
• USENET newsgroup postings.
• ActiveDir Org postings.

Usage

    Download and type SecData /?

See current usage screens