Viewing a User's Managed Objects






Viewing a User's Managed Objects

Problem

You want to view the objects that are owned by a user.

Solution

Using a graphical user interface
  1. Open ADSI Edit.

  2. If an entry for the naming context you want to browse is not already displayed, do the following:

    1. Right-click on ADSI Edit in the right pane and click "Connect to…."

    2. Fill in the information for the naming context, container, or OU you want to add an object to. Click on the Advanced button if you need to enter alternate credentials.

  3. In the left pane, browse to the naming context, container, or OU of the object you want to view. Once you've found the object, right-click on it and select Properties.

  4. View the managedObjects attribute.

Using a command-line interface
	> adfind b "<UserDN>" managedObjects

Using VBScript
	' This code displays the  
managed objects for a user
	' ------ SCRIPT CONFIGURATION ------ 
	strUserDN = "<UserDN>" ' e.g. cn=jsmith,cn=Users,dc=rallencorp,dc=com
	' ------ END CONFIGURATION ---------

	on error resume next
	set objUser = GetObject("LDAP://" & strUserDN)
	Wscript.Echo objUser.Get("cn") & "'s  
Managed Objects:"
	colObjects = objUser.GetEx("managedObjects")
	if Err.Number = -2147463155 then
	   Wscript.Echo " none"
	else
	   for each strObjectDN in colObjects
	      Wscript.Echo " " & strObjectDN
	   next
	end if

Discussion

The managedObjects attribute is linked to the managedBy attribute that can be set on certain objects in Active Directory like computers, OUs, and groups. Setting the managedBy attribute provides a quick way to define who owns an object. If you do use it, you can use the managedObjects attribute on user, contact, or group objects to get the list of objects for which the user has been configured in the managedBy attribute.



 Python   SQL   Java   php   Perl 
 game development   web development   internet   *nix   graphics   hardware 
 telecommunications   C++ 
 Flash   Active Directory   Windows