DS Commands

Localizar endereços smtp no AD
>dsquery * forestroot -scope subtree -filter "(&(mail=*)(proxyaddresses=smtp:*@mydomain.com))" -attr proxyaddresses

Localizar membros de grupo
>dsquery group -name dti_manut_atend_usu | dsget group -members

Users que não se logam nas ultimas 4 semanas
>dsquery user "ou=Sales,ou=West,dc=MyDomain,dc=com" -inactive 4

Users que não trocaram senha nos ultimos 30 dias
>dsquery user "ou=Sales,ou=West,dc=MyDomain,dc=com" -stalepwd 30

Listar data expiração logins
>dsquery user "ou=wireles_publico,dc=alergs,dc=br" | dsget user -samid -acctexpires

Alterar senha usuário
>dsquery user <filtro> | dsmod user -pwd <senha> -mustchpwd yes

Adicionar usuário a grupo
>dsmod group <grupo> -addmbr/rmmbr <user>
>dsquery user <ou> | dsmod group <grupo> -addmbr

Listar grupos do usuário
>dsget user <user> -memberof


>dsquery group "dc=tjmt,dc=gov,dc=br" -scope subtree -name %1 | dsget group -members | dsget user -samid -upn -fn -ln -desc > lista.txt

>dsquery user domainroot |dsget user -upn -disabled

>dsquery * -filter "(&(objectCategory=person)(objectClass=user)(mail=*))" -attr mail displayname

>dsquery computer -inactive 4  |dsrm

>dsquery user "ou=users,dc=alergs,dc=br" |dsmod user -pwdneverexpires yes

>msiexec /i esmvista /q

>forfiles -p "path" -d -21 -c "cmd /c del @path"

>findstr