TIP: how to use repadmin to find user info in AD LDS

Tip

This posting presents repadmin commands useful against an AD LDS instance used for a small SharePoint 2007 farm.

Get Time Stamps

Get badPasswordTime, lastLogonTimestamp, pwdLastSet and whenCreated for all users

repadmin /showattr * "CN=...,dc=...,dc=..." /subtree /filter:"(&(objectCategory=Person)(objectClass=user))" /attrs:badPasswordTime,lastLogontimestamp,pwdLastSet,whenCreated /homeserver:serverName:389 > C:\lastlogons.txt

References

• Windows Server 2012: Repadmin
• Windows Server 2003: Repadmin
• Repadmin Requirements, Syntax, and Parameter Descriptions
• Repadmin for Experts
• Repadmin Syntax
• The repadmin command ignores a Windows Server 2008-based RODC when the command is used together with the /syncall switch
• “The LastLogonTimeStamp Attribute” – “What it was designed for and how it works”
• ldap query find active users
• LDAP Query Basics

Notes

• Windows Server 2008 R2