Wednesday, February 8, 2012

Retrieving Active Directory Attribute Modification Information

Many a times, we may be required to verify the date /time that an attribute in a object example user account has changed and where is the Site that it was changed.

To do this, the following command can be used

repadmin /showobjmeta DCname "<DN of the user>" >c:\<username>.txt

The command will output the information into a text file with the user's name. A sample of the output is as below. With this you will be able to retrieve the change originated from which DC.

This is extremely good for enterprise with multiple DCs and when time comes for some CSI work to be done, you will know when and where to look.

1 comment:

  1. What software do you use for the active directory auditing? I want to try Total network inventory, it looks like a good choice.