Viewing a User's Managed Objects
You want to view the objects that are owned by a user.
Using a graphical user interface
Using a command-line interface
> adfind b "<UserDN>" managedObjects
' This code displays the managed objects for a user ' ------ SCRIPT CONFIGURATION ------ strUserDN = "<UserDN>" ' e.g. cn=jsmith,cn=Users,dc=rallencorp,dc=com ' ------ END CONFIGURATION --------- on error resume next set objUser = GetObject("LDAP://" & strUserDN) Wscript.Echo objUser.Get("cn") & "'s Managed Objects:" colObjects = objUser.GetEx("managedObjects") if Err.Number = -2147463155 then Wscript.Echo " none" else for each strObjectDN in colObjects Wscript.Echo " " & strObjectDN next end if
The managedObjects attribute is linked to the managedBy attribute that can be set on certain objects in Active Directory like computers, OUs, and groups. Setting the managedBy attribute provides a quick way to define who owns an object. If you do use it, you can use the managedObjects attribute on user, contact, or group objects to get the list of objects for which the user has been configured in the managedBy attribute.