python ldap3域控组件(未完成,待跟进)

LDAP3 模块官网:

https://ldap3.readthedocs.io/en/latest/modifydn.html?highlight=%20modify_dn#the-modify-dn-operation

 

已摸索的代码:

from ldap3 import Server, Connection, ALL

# host为域控服务器ip
server = Server("192.168.0.245",get_info=ALL)

# user(如domain\Administrator)和passwod为登录域控服务器的账户密码
conn = Connection(server, 'anec\Anec', 'He123123!!', auto_bind=True)

# # 搜索----------------------------------------------
res = conn.search('CN=Computers,dc=anec,dc=com', search_filter='(objectclass=person)',attributes=['cn'])
# # search是否成功(True,False)
# print(res)
# # 查询失败的原因
# print(conn.result)
#查询到的数据
print(conn.entries[0])

# #-----------------------------------------------------
# # 添加部门,固定搭配:object_class='OrganizationalUnit'
# res = conn.add('OU=ceshi,dc=anec,dc=com', object_class='OrganizationalUnit')
# print(res)
# print(conn.result)



# """
#         参考: https://ldap3.readthedocs.io/tutorial_operations.html
#         :param userid:     "linan"
#         :param username:   "姓名" cn=姓名
#         :param mobile:
#         :param mail:       "xxx@domain.com"
#         :param title:
#         :param ou_dn:     "ou=运维中心,dc=domain,dc=com"
#         :param gidnumber: 501 默认用户组
#         :return:
# """
# # # 添加用户,attributes支持的字段可以通过server.schema.object_classes['user']获取
# res = conn.add('CN=aa3,OU=ceshi,dc=anec,dc=com', object_class='user', attributes={
#     'mobile': '123',               #座机电话
#     'sn': 'aa3',                        #姓
#     'mail': 'aa3@qq.com',               #电子邮箱
#     'userPassword': 'He123123!!',
#     'title': 'aaa3',
#     'uid': 'aa2'
#     # 'gidNumber': gidnumber,
#     # 'uidNumber': uidNumber
#     # 'homeDirectory': '/home/users/%s' % userid,
#     # 'loginShell': '/bin/bash'
#     })
# print(res)
# print(conn.result)

 

修改AD域用户的OU(组织单元)

# coding=utf-8
from ldap3 import Server, Connection

CeshiServer = {
    'IP': "10.1.88.40",
    # 此处注意账号前一定需要添加对应AD域的域名,否则登录绑定失败
    'admin': r'ceshi\XXXX',
    'password': 'XXXXXX',
    'basedomain': 'dc=ceshi,dc=com'
}

# 连接到AD域控
server = Server(CeshiServer.get('IP'))  # 替换为您的域控地址
conn = Connection(server, CeshiServer.get('admin'), CeshiServer.get('password'), auto_bind=True)  # 替换为您的域控用户名和密码

# 准备移动用户的相关信息
user_dn = 'cn=1,ou=test,dc=ceshi,dc=com'  # 替换为要移动的用户的DN
new_ou_dn = 'ou=test02,dc=ceshi,dc=com'  # 替换为用户要移动到的新组织单元的DN

# 转移OU
conn.modify_dn('cn=1,ou=test,dc=ceshi,dc=com', 'cn=1', new_superior='ou=test02,dc=ceshi,dc=com')

# {'result': 0, 'description': 'success', 'dn': '', 'message': '', 'referrals': None, 'type': 'modDNResponse'}
print(conn.result)

# 关闭
conn.unbind()

 

修改AD域用户命名(组织单元)

# coding=utf-8
from ldap3 import Server, Connection

CeshiServer = {
    'IP': "10.1.88.40",
    # 此处注意账号前一定需要添加对应AD域的域名,否则登录绑定失败
    'admin': r'ceshi\hequn',
    'password': 'He123123!!',
    'basedomain': 'dc=ceshi,dc=com'
}

# 连接到AD域控
server = Server(CeshiServer.get('IP'))  # 替换为您的域控地址
conn = Connection(server, CeshiServer.get('admin'), CeshiServer.get('password'), auto_bind=True)  # 替换为您的域控用户名和密码

# 准备移动用户的相关信息
user_dn = 'cn=1,ou=test,dc=ceshi,dc=com'  # 替换为要移动的用户的DN
new_ou_dn = 'ou=test02,dc=ceshi,dc=com'  # 替换为用户要移动到的新组织单元的DN

# 重命名用户
conn.modify_dn('cn=user1,ou=users,o=company', 'cn=user2')
print(conn.result)

# {'result': 0, 'description': 'success', 'dn': '', 'message': '', 'referrals': None, 'type': 'modDNResponse'}
print(conn.result)

# 关闭
conn.unbind()

 

封装模块

# coding=utf-8
# author :hequn
# version 2023.5.19 v2.0


from ldap3 import Server, Connection, ALL, SUBTREE, MODIFY_REPLACE
from ldap3.extend.microsoft.modifyPassword import ad_modify_password
from ldap3.extend.microsoft.addMembersToGroups import ad_add_members_to_groups as addMembersToGroups
from ldap3.extend.microsoft.removeMembersFromGroups import ad_remove_members_from_groups as removeMembersToGroups

class Domain(object):
    Conn = ''
    sever = ''

    def __init__(self, IP, username, password, use_ssl=False):
        """
        :param IP: 服务器IP地址
        :param username: 有权限修改的账户名
        :param password: 账户密码
        :param use_ssl: 是否使用ssl方式连接
        """
        self.sever = Server(IP, get_info=ALL, use_ssl=use_ssl)
        self.Conn = Connection(self.sever, username, password, auto_bind=True)

    def Search(self, DomainAddress, Fileter,Attributes=None):
        '''
        :param DomainAddress:
        :param Fileter:
            '(objectcategory=organizationalunit)' 搜索 OU
            '(objectcategory=computer)'  搜索 主机
            '(objectClass=group)' 搜索 用户组
            '(&(userPrincipalName=*)(|(cn=%s)(sAMAccountName=%s)))'  搜索给定用户信息
            '(&(objectClass=user)(objectClass=person))' 搜索 所有用户
        :param Attributes:
        :return: 返回list数据
        '''

        if not Attributes:
            Attributes = ['*']

        self.Conn.search(DomainAddress,
                         Fileter,
                         attributes=Attributes,
                         paged_size=1000,
                         search_scope=SUBTREE)
        date_list = list()
        date_list.extend(self.Conn.entries)
        cookie = self.Conn.result['controls']['1.2.840.113556.1.4.319']['value']['cookie']
        while cookie:
            self.Conn.search(DomainAddress,
                             Fileter,
                             attributes=Attributes,
                             paged_size=1000,
                             search_scope=SUBTREE, paged_cookie=cookie)
            date_list.extend(self.Conn.entries)
            cookie = self.Conn.result['controls']['1.2.840.113556.1.4.319']['value']['cookie']
        return date_list

    # 新增OU
    def AddOU(self, ouName):
        '''
        :param ouName: 新增OU,必须输入完整的路径才能新增
        实例:
            ou=test,dc=ceshi,dc=com
        :return:
            True / False
        '''
        try:
            result = self.Conn.add(ouName, object_class='OrganizationalUnit')
            return result
        except Exception as e:
            print(e)
            self.sever = None
            self.Conn = None
            return False

    # 新增用户
    def add_ad_user(self,emaildomian,username, password, description, depFullpath):

        '''
        :param emaildomian:
            ceshi.com 邮箱后面一节
        :param username:
            testuser 用户登录名
        :param password:
            XXXXXX   用户密码
        :param description:
            描述信息
        :param depFullpath:
            ou=test,dc=ceshi,dc=com 部门ou全名:
        :param attributes:
        :return:
        '''
        attributes = {'displayName': username,
                               'description': description,
                               'userPrincipalName':' %s@%s' % (username, emaildomian),
                               'userAccountControl': '544',
                               'sAMAccountName': username,
                               'pwdLastSet': -1}

        try:
            resulit = self.Conn.add('CN=' + username +',' + depFullpath,['User'],attributes=attributes)
            res = self.UpdateUserPassword('CN=' + username +',' + depFullpath,password)
            if resulit and res:
                return True
            else:
                return False

        except Exception as e:
            self.Conn.server =None
            self.Conn.connect =None
            return False


    # 新增用户组
    def AddGroup(self, OU,GroupType={'groupType':-2147483646}):
        """
        :param OU: str type  'cn=ALBION品牌学院,ou=共享文件夹群组,dc=syounggroup,dc=com',
        :param Attributes: dict type
              groupType: -2147483644
                        -2147483644 本地组
                        -2147483646 全局组
        :return:
        """
        try:
            res = self.Conn.add(OU, 'group',GroupType)
            return res

        except Exception as e:
            print(e)
            self.sever = None
            self.Conn = None
            return False


    def PasswordAuth(self,serverip, username, password):
        '''
        :param serverip:
            服务器IP地址,固定AD服务器可以写固定值
        :param username:
            用户名 域用户效验时,需要加前缀
            ceshi\user
        :param password:
            用户密码
        :return:
            'result': 0, 'description': 'success'
            (0, 'success') 密码正确
        '''
        try:
            s = Server(serverip, port=389, get_info=ALL, use_ssl=False)
            c = Connection(s, user=username, password=password, check_names=True,
                           lazy=False, raise_exceptions=False)
            c.open()
            c.bind()
            return (c.result['result'],'密码正确')
        except Exception as e:
            return (1,'账户密码不正确或用户不存在!')

    #将用户添加到指定组
    def AddUserOnOrganizationalUnit(self,MembersList,GroupList):
        return addMembersToGroups(self.Conn,MembersList,GroupList)

    def RemoveUserOnOrganizationalUnit(self,MembersList,GroupList):
        return removeMembersToGroups(self.Conn, MembersList, GroupList,True)

        # 修改用户密码
    def UpdateUserPassword(self,UserFullname,password):
        '''
        :param UserFullname:
        :param newpassword:
        :return:
            True / False
        '''
        try:
            res = ad_modify_password(self.Conn,UserFullname,password,None)
            if res:
                return True
            else:
                return False
        except Exception as e:
            print(e)
            self.sever = None
            self.Conn = None
            return False

    # 禁止用户
    def DisableUser(self, UserFullname):
        """
        禁用ad用户
        :param UserFullname 完整的OU地址:
        :return:
        """
        try:
            self.Conn.modify(UserFullname, {'userAccountControl': [(MODIFY_REPLACE, ['514'])]})
            res = self.Conn.result
            if res['result'] == 0 and res['description'] == 'success':
                return True
            else:
                return False
        except Exception as e:
            print(e)
            self.sever = None
            self.Conn = None
            return False

    # 启用用户
    def EnableUser(self,UserFullname):
        """
        启用ad用户
        :param UserFullname 完整的OU地址:
        :return:
        """
        try:
            self.Conn.modify(UserFullname,
                                 {'userAccountControl': [(MODIFY_REPLACE, ['544'])]})
            res = self.Conn.result
            if res['result'] == 0 and res['description'] == 'success':
                return True
            else:
                return False
        except Exception as e:
            print(e)
            self.sever = None
            self.Conn = None
            return False

    # 删除用户
    def delete_ad_user(self,UserFullname):
        """
        删除ad用户
        :param UserFullname 完整的OU地址:
        :return:
        """
        try:
            res = self.Conn.delete(UserFullname)
            return res

        except Exception as e:
            print(e)
            self.sever = None
            self.Conn = None
            return False

if __name__ == '__main__':

    CeshiServer = {
        'IP': "10.1.88.40",
        'username': r'ceshi\XXXX',
        'password': 'XXXXX!',
        'basedomain': 'dc=ceshi,dc=com'
    }


    do = Domain(CeshiServer.get('IP'),CeshiServer.get('username'),CeshiServer.get('password'),use_ssl=True)
    flag = do.Mimaxiaoyan('10.1.88.40','ceshi\XXXX','XXXXX')
    print(do.Conn.result)
    print(flag)

 

请求域控数据 以及过滤条件 语法

# 在修改用户组织单元 distinguishedName 属性时:
根据返回的错误信息,用户移动失败的原因是"constraintViolation",并指定了属性"distinguishedName"的约束违反。
这种情况通常发生在试图修改用户的"distinguishedName"属性时,因为"distinguishedName"是一个只读属性,不允许直接修改。
在AD域控中,用户的"distinguishedName"属性是其在目录树中的唯一标识,它包含了用户所在的位置信息,包括组织单元、域和根目录等。由于"distinguishedName"是由系统自动生成和维护的,因此不允许直接修改它。
如果您想要移动用户到另一个部门,应该通过修改用户所在的组织单元(OU)或其他相关属性来实现,而不是修改"distinguishedName"属性。

过滤条件:
    filter     = "(" filtercomp ")"
        filtercomp = and / or / not / item
        and        = "&" filterlist
        or         = "|" filterlist
        not        = "!" filter
        filterlist = 1*filter
        item       = simple / present / substring / extensible
        simple     = attr filtertype value
        filtertype = equal / approx / greater / less
        equal      = "="
        approx     = "~="
        greater    = ">="
        less       = "<="
        extensible = attr [":dn"] [":" matchingrule] ":=" value
                     / [":dn"] ":" matchingrule ":=" value
        present    = attr "=*"
        substring  = attr "=" [initial] any [final]
        initial    = value
        any        = "*" *(value "*")
        final      = value
        attr       = AttributeDescription from Section 4.1.5 of [1]
        matchingrule = MatchingRuleId from Section 4.1.9 of [1]
        value      = AttributeValue from Section 4.1.6 of [1]


类方法
    ['_state', 'userPrincipalName', 'badPasswordTime', 'objectGUID', 'msDS-SupportedEncryptionTypes', 'uSNChanged', 'logonCount', 'objectClass', 'userWorkstations', 'lastLogoff', 'primaryGroupID', 'dSCorePropagationData', 'lastLogonTimestamp', 'sn', 'userAccountControl', 'whenCreated', 'distinguishedName', 'memberOf', 'displayName', 'sIDHistory', 'adminCount', 'badPwdCount', 'uSNCreated', 'whenChanged', 'objectCategory', 'countryCode', 'lastLogon', 'pwdLastSet', 'objectSid', 'lockoutTime', 'name', 'sAMAccountName', 'cn', 'accountExpires', 'pager', 'sAMAccountType', 'mail', 'codePage', 'logonHours', 'instanceType', '__module__', '__doc__', 'entry_writable', '__init__', '__repr__', '__str__', '__iter__', '__contains__', '__getattr__', '__setattr__', '__getitem__', '__eq__', '__lt__', 'entry_dn', 'entry_cursor', 'entry_status', 'entry_definition', 'entry_raw_attributes', 'entry_raw_attribute', 'entry_mandatory_attributes', 'entry_attributes', 'entry_attributes_as_dict', 'entry_read_time', '_changes', 'entry_to_json', 'entry_to_ldif', '__dict__', '__weakref__', '__hash__', '__getattribute__', '__delattr__', '__le__', '__ne__', '__gt__', '__ge__', '__new__', '__reduce_ex__', '__reduce__', '__subclasshook__', '__init_subclass__', '__format__', '__sizeof__', '__dir__', '__class__']


OU 组织单元参数
实例(entry_attributes_as_dict 转成dict类型):
    {'uSNChanged': [12736], 'distinguishedName': ['OU=办公信息化一部,DC=ceshi,DC=com'], 'whenCreated': [datetime.datetime(2022, 5, 15, 7, 57, 13, tzinfo=datetime.timezone.utc)], 'objectGUID': ['{6d17380a-e728-4a46-a448-7bcb0c13add0}'], 'uSNCreated': [12736], 'whenChanged': [datetime.datetime(2022, 5, 15, 7, 57, 13, tzinfo=datetime.timezone.utc)], 'ou': ['办公信息化一部'], 'instanceType': [4], 'name': ['办公信息化一部'], 'dSCorePropagationData': [datetime.datetime(1601, 1, 1, 0, 0, tzinfo=datetime.timezone.utc)], 'objectClass': ['top', 'organizationalUnit'], 'objectCategory': ['CN=Organizational-Unit,CN=Schema,CN=Configuration,DC=ceshi,DC=com']}
参数分析:
    distinguishedName  ['OU=办公信息化一部,DC=ceshi,DC=com']
    whenCreated   [datetime.datetime(2022, 5, 15, 7, 57, 13, tzinfo=datetime.timezone.utc)]
    'objectGUID': ['{6d17380a-e728-4a46-a448-7bcb0c13add0}']
    'uSNCreated': [12736]
    'whenChanged': [datetime.datetime(2022, 5, 15, 7, 57, 13, tzinfo=datetime.timezone.utc)]
    'ou': ['办公信息化一部']
    'instanceType': [4]
    'name': ['办公信息化一部']
    'dSCorePropagationData': [datetime.datetime(1601, 1, 1, 0, 0, tzinfo=datetime.timezone.utc)]
    'objectClass': ['top', 'organizationalUnit']
    'objectCategory': ['CN=Organizational-Unit,CN=Schema,CN=Configuration,DC=ceshi,DC=com']}


objectcategory 参数:

    user  查询用户信息
        示例:
            DN: CN=gest002,OU=IT审计,OU=不同步邮箱账号,DC=yujiahui,DC=com - STATUS: Read - READ TIME: 2021-05-26T17:24:43.533054
            accountExpires: 9999-12-31 23:59:59.999999+00:00
            badPasswordTime: 1601-01-01 00:00:00+00:00
            badPwdCount: 0
            c: CN
            cn: gest002
            co: 中国
            codePage: 0
            company: 公司名字
            countryCode: 156
            dSCorePropagationData: 1601-01-01 00:00:00+00:00
            department: 部门
            description: 帅帅
            displayName: 显示名字
            distinguishedName: CN=gest002,OU=IT审计,OU=不同步邮箱账号,DC=yujiahui,DC=com
            facsimileTelephoneNumber: 传真
            givenName: 名
            homePhone: 家庭电话
            info: 注释
            instanceType: 4
            ipPhone: IP电话
            l: 长沙
            lastLogoff: 1601-01-01 00:00:00+00:00
            lastLogon: 1601-01-01 00:00:00+00:00
            logonCount: 0
            mail: 邮箱
            mobile: 移动电话
            name: gest002
            objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=yujiahui,DC=com
            objectClass: top
                         person
                         organizationalPerson
                         user
            objectGUID: {1e4a9df2-73a2-49cc-9ef4-be1440aafb6b}
            objectSid: S-1-5-21-514234331-3194182272-42211215-19113
            pager: 寻呼机
            physicalDeliveryOfficeName: 办公室
            postOfficeBox: 邮政信箱
            postalCode: 邮政编码
            primaryGroupID: 513
            pwdLastSet: 2020-05-13 01:40:25.281412+00:00
            sAMAccountName: gest002
            sAMAccountType: 805306368
            sn: 性
            st: 湖南
            streetAddress: 岳麓区
            telephoneNumber: 电话
            title: 职位
            uSNChanged: 73633199
            uSNCreated: 31293888
            userAccountControl: 512
            userPrincipalName: gest002@yujiahui.com
            wWWHomePage: 首页
            whenChanged: 2021-05-26 09:25:01+00:00
            whenCreated: 2020-05-13 01:40:25+00:00

    [DN: CN=ceshiuser0001,OU=江楠测试,OU=IT测试使用,OU=不同步邮箱账号,DC=syounggroup,DC=com - STATUS: Read - READ TIME: 2023-05-17T20:28:34.976265
    accountExpires: 9999-12-31 23:59:59.999999+00:00
    badPasswordTime: 1601-01-01 00:00:00+00:00
    badPwdCount: 0
    cn: ceshiuser0001
    codePage: 0
    countryCode: 0
    dSCorePropagationData: 2021-12-29 08:21:14+00:00
                           2021-11-22 11:40:18+00:00
                           2021-11-19 08:25:14+00:00
                           2021-11-19 08:24:14+00:00
                           1601-07-14 22:36:48+00:00
    displayName: ceshiuser0001
    distinguishedName: CN=ceshiuser0001,OU=江楠测试,OU=IT测试使用,OU=不同步邮箱账号,DC=syounggroup,DC=com
    instanceType: 4
    lastLogoff: 1601-01-01 00:00:00+00:00
    lastLogon: 1601-01-01 00:00:00+00:00
    logonCount: 0
    memberOf: CN=ceshi00003,OU=江楠测试,OU=IT测试使用,OU=不同步邮箱账号,DC=syounggroup,DC=com
    name: ceshiuser0001
    objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=syounggroup,DC=com
    objectClass: top
                 person
                 organizationalPerson
                 user
    objectGUID: {88b54ff6-0ae5-4bf4-a9de-4da42661736b}
    objectSid: S-1-5-21-88358230-583260354-1133626278-9313
    primaryGroupID: 513
    pwdLastSet: 2021-06-19 15:22:58.745535+00:00
    sAMAccountName: ceshiuser0001
    sAMAccountType: 805306368
    telephoneNumber: 2222222222
    uSNChanged: 129477678
    uSNCreated: 6780244
    userAccountControl: 544
    userPrincipalName: ceshiuser0001@syounggroup.com
    whenChanged: 2023-05-17 12:22:39+00:00
    whenCreated: 2021-06-19 15:22:58+00:00
]




    person 同样也是查询用户信息
        示例:
            DN: CN=紫心,OU=北区,OU=销售管理学院,OU=线下运营部,OU=御泥坊品牌事业部,DC=yujiahui,DC=com - STATUS: Read - READ TIME: 2021-04-16T17:16:39.473933
            accountExpires: 9999-12-31 23:59:59.999999+00:00
            badPasswordTime: 2021-04-02 10:41:43.869543+00:00
            badPwdCount: 2
            cn: 紫心
            codePage: 0
            countryCode: 0
            dSCorePropagationData: 2021-02-27 09:59:31+00:00
                                   2020-03-12 18:24:55+00:00
                                   2020-03-12 18:04:14+00:00
                                   2020-03-09 09:03:41+00:00
                                   1601-01-01 18:16:32+00:00
            displayName: 紫心
            distinguishedName: CN=紫心,OU=北区,OU=销售管理学院,OU=线下运营部,OU=御泥坊品牌事业部,DC=yujiahui,DC=com
            instanceType: 4
            lastLogon: 2020-10-04 21:45:51.685938+00:00
            lastLogonTimestamp: 2021-03-31 12:32:18.595932+00:00
            logonCount: 0
            mail: zixin@yujiahui.com
            name: 紫心
            objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=yujiahui,DC=com
            objectClass: top
                         person
                         organizationalPerson
                         user
            objectGUID: {7ae52268-8ca2-436e-b907-8c77439bc418}
            objectSid: S-1-5-21-514234331-3194182272-42211215-3417
            pager: 1622302333
            primaryGroupID: 513
            pwdLastSet: 2016-06-13 16:01:42.403833+00:00
            sAMAccountName: zixin
            sAMAccountType: 805306368
            scriptPath: 360EntSetup.bat
            sn: 罗菱菱
            uSNChanged: 71886062
            uSNCreated: 18496
            userAccountControl: 66048
            userPrincipalName: zixin@yujiahui.com
            userWorkstations: zixin,domain-server,backup-domain,16adbackup
            whenChanged: 2021-03-31 12:32:18+00:00
            whenCreated: 2016-06-03 07:19:39+00:00

    computer 查询计算机
        示例:
            DN: CN=XIANGBIN,OU=Computers02,DC=yujiahui,DC=com - STATUS: Read - READ TIME: 2021-04-16T17:28:28.849849
            accountExpires: 9999-12-31 23:59:59.999999+00:00
            cn: XIANGBIN
            codePage: 0
            countryCode: 0
            dNSHostName: XIANGBIN.yujiahui.com
            dSCorePropagationData: 2021-01-02 12:15:34+00:00
                                   2020-03-12 18:26:30+00:00
                                   2020-03-12 18:24:55+00:00
                                   2020-03-12 18:18:00+00:00
                                   1601-01-01 18:12:16+00:00
            distinguishedName: CN=XIANGBIN,OU=Computers02,DC=yujiahui,DC=com
            instanceType: 4
            isCriticalSystemObject: False
            lastLogonTimestamp: 2016-08-08 05:53:24.424793+00:00
            localPolicyFlags: 0
            msDS-SupportedEncryptionTypes: 28
            name: XIANGBIN
            objectCategory: CN=Computer,CN=Schema,CN=Configuration,DC=yujiahui,DC=com
            objectClass: top
                         person
                         organizationalPerson
                         user
                         computer
            objectGUID: {e3083b7b-3917-4482-910a-f311e0b83698}
            objectSid: S-1-5-21-514234331-3194182272-42211215-4305
            operatingSystem: Windows 7 旗舰版
            operatingSystemServicePack: Service Pack 1
            operatingSystemVersion: 6.1 (7601)
            primaryGroupID: 515
            pwdLastSet: 2016-08-08 05:53:25.391998+00:00
            sAMAccountName: XIANGBIN$
            sAMAccountType: 805306369
            servicePrincipalName: TERMSRV/xiangbin.yujiahui.com
                                  TERMSRV/XIANGBIN
                                  RestrictedKrbHost/XIANGBIN
                                  HOST/XIANGBIN
                                  RestrictedKrbHost/XIANGBIN.yujiahui.com
                                  HOST/XIANGBIN.yujiahui.com
            uSNChanged: 23276811
            uSNCreated: 12920
            userAccountControl: 4096
            whenChanged: 2020-03-04 18:04:33+00:00
            whenCreated: 2016-07-07 01:46:43+00:00


    group  查询用户组信息
        示例:
            DN: CN=花瑶花,OU=用户新建组,OU=不同步邮箱账号,DC=yujiahui,DC=com - STATUS: Read - READ TIME: 2021-04-16T17:08:57.870776
            cn: 花瑶花
            dSCorePropagationData: 2020-03-12 18:24:55+00:00
                                   2020-03-12 18:04:13+00:00
                                   2019-08-16 07:44:44+00:00
                                   2019-08-16 07:32:40+00:00
                                   1601-07-14 22:36:49+00:00
            distinguishedName: CN=花瑶花,OU=用户新建组,OU=不同步邮箱账号,DC=yujiahui,DC=com
            groupType: -2147483646
            instanceType: 4
            name: 花瑶花
            objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=yujiahui,DC=com
            objectClass: top
                         group
            objectGUID: {075ff5c5-46d1-4baf-bf01-ac963cda12e0}
            objectSid: S-1-5-21-514234331-3194182272-42211215-3314
            sAMAccountName: 花瑶花
            sAMAccountType: 268435456
            uSNChanged: 12861
            uSNCreated: 12861
            whenChanged: 2019-04-25 16:38:16+00:00
            whenCreated: 2016-05-23 08:40:29+00:00

被禁用用户
    DN: CN=农九,OU=大集团淘内接待组,OU=水羊国际大集团客服部,OU=水羊客服事业部,OU=水羊股份,DC=syounggroup,DC=com - STATUS: Read - READ TIME: 2023-02-21T15:57:17.343968
    accountExpires: 9999-12-31 23:59:59.999999+00:00
    badPasswordTime: 2023-01-17 08:04:23.856802+00:00
    badPwdCount: 2
    cn: 农九
    codePage: 0
    countryCode: 0
    dSCorePropagationData: 2022-10-29 05:30:52+00:00
                           2021-11-22 11:40:18+00:00
                           2021-11-19 08:25:14+00:00
                           2021-11-19 08:24:14+00:00
                           1601-07-14 22:36:50+00:00
    displayName: 农九
    distinguishedName: CN=农九,OU=大集团淘内接待组,OU=水羊国际大集团客服部,OU=水羊客服事业部,OU=水羊股份,DC=syounggroup,DC=com
    instanceType: 4
    lastLogoff: 1601-01-01 00:00:00+00:00
    lastLogon: 2023-01-10 08:41:29.045841+00:00
    lastLogonTimestamp: 2023-01-10 08:41:29.045841+00:00
    logonCount: 313
    mail: nongjiu@syounggroup.com
    memberOf: CN=98-3-水羊客服事业部-水羊国际大集团客服部,OU=98-水羊客服事业部,OU=共享权限组,DC=syounggroup,DC=com
              CN=50-阿凡达客服组-只读组,OU=50-阿凡达客服组,OU=共享权限组,DC=syounggroup,DC=com
    msDS-SupportedEncryptionTypes: 0
    name: 农九
    objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=syounggroup,DC=com
    objectClass: top
                 person
                 organizationalPerson
                 user
    objectGUID: {34a4f64c-966c-4473-ac4e-3004f198239e}
    objectSid: S-1-5-21-88358230-583260354-1133626278-11774
    primaryGroupID: 513
    pwdLastSet: 2023-01-11 09:39:57.446667+00:00
    sAMAccountName: nongjiu
    sAMAccountType: 805306368
    sn: 朱运爽
    uSNChanged: 106129581
    uSNCreated: 19484990
    userAccountControl: 514
    userPrincipalName: nongjiu@syounggroup.com
    userWorkstations: nongjiu,domain-server,backup-domain,16adbackup,server12,slaveAD
    whenChanged: 2023-01-11 09:40:17+00:00
    whenCreated: 2021-09-27 01:26:22+00:00


组:
    DN: CN=16-HPH私域共享-管理组,OU=16-HPH私域共享,OU=共享权限组,DC=syounggroup,DC=com - STATUS: Read - READ TIME: 2023-03-06T12:21:13.226503
    cn: 16-HPH私域共享-管理组
    dSCorePropagationData: 2022-05-23 06:11:20+00:00
                           2021-11-22 11:40:18+00:00
                           1601-01-01 00:04:17+00:00
    distinguishedName: CN=16-HPH私域共享-管理组,OU=16-HPH私域共享,OU=共享权限组,DC=syounggroup,DC=com
    groupType: -2147483646
    instanceType: 4
    name: 16-HPH私域共享-管理组
    objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=syounggroup,DC=com
    objectClass: top
                 group
    objectGUID: {793c6cb5-53b8-4a2c-b471-b806766e52f3}
    objectSid: S-1-5-21-88358230-583260354-1133626278-13270
    sAMAccountName: $MUC000-06JR8RB61S6T
    sAMAccountType: 268435456
    uSNChanged: 26319530
    uSNCreated: 26319530
    whenChanged: 2021-11-22 11:14:51+00:00
    whenCreated: 2021-11-22 11:14:51+00:00
, DN: CN=16-HPH私域共享-只读组,OU=16-HPH私域共享,OU=共享权限组,DC=syounggroup,DC=com - STATUS: Read - READ TIME: 2023-03-06T12:21:13.226503
    cn: 16-HPH私域共享-只读组
    dSCorePropagationData: 2022-05-23 06:11:20+00:00
                           2021-11-22 11:40:18+00:00
                           1601-01-01 00:04:17+00:00
    distinguishedName: CN=16-HPH私域共享-只读组,OU=16-HPH私域共享,OU=共享权限组,DC=syounggroup,DC=com
    groupType: -2147483646
    instanceType: 4
    member: CN=茉欣,OU=大水滴业务中台组,OU=大水滴综合运营部,OU=大水滴渠道运营部,OU=大水滴品牌事业部,OU=水羊股份,DC=syounggroup,DC=com
    name: 16-HPH私域共享-只读组
    objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=syounggroup,DC=com
    objectClass: top
                 group
    objectGUID: {97a127ec-6c1f-4d92-993f-c6a80d460990}
    objectSid: S-1-5-21-88358230-583260354-1133626278-13271
    sAMAccountName: $NUC000-5TNE6TTUTRRU
    sAMAccountType: 268435456
    uSNChanged: 27205845
    uSNCreated: 26319534
    whenChanged: 2021-11-29 02:37:47+00:00
    whenCreated: 2021-11-22 11:14:51+00:00
, DN: CN=16-HPH私域共享-读写组,OU=16-HPH私域共享,OU=共享权限组,DC=syounggroup,DC=com - STATUS: Read - READ TIME: 2023-03-06T12:21:13.226503
    cn: 16-HPH私域共享-读写组
    dSCorePropagationData: 2022-05-23 06:11:20+00:00
                           2021-11-22 11:40:18+00:00
                           1601-01-01 00:04:17+00:00
    distinguishedName: CN=16-HPH私域共享-读写组,OU=16-HPH私域共享,OU=共享权限组,DC=syounggroup,DC=com
    groupType: -2147483646
    instanceType: 4
    member: CN=小飘,OU=HPH品牌管理部,OU=水羊股份,DC=syounggroup,DC=com
            CN=黛窗,OU=HPH品牌管理部,OU=水羊股份,DC=syounggroup,DC=com
            CN=麦麦,OU=HPH品牌管理部,OU=水羊股份,DC=syounggroup,DC=com
            CN=怀仁,OU=HPH品牌管理部,OU=水羊股份,DC=syounggroup,DC=com
    name: 16-HPH私域共享-读写组
    objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=syounggroup,DC=com
    objectClass: top
                 group
    objectGUID: {aff18205-08b4-4e37-944d-e69412aabce2}
    objectSid: S-1-5-21-88358230-583260354-1133626278-13272
    sAMAccountName: $OUC000-1J6O29N609GJ
    sAMAccountType: 268435456
    uSNChanged: 27206107
    uSNCreated: 26319538
    whenChanged: 2021-11-29 02:39:21+00:00
    whenCreated: 2021-11-22 11:14:51+00:00
, DN: CN=16-HPH私域共享-特权组,OU=16-HPH私域共享,OU=共享权限组,DC=syounggroup,DC=com - STATUS: Read - READ TIME: 2023-03-06T12:21:13.226503
    cn: 16-HPH私域共享-特权组
    dSCorePropagationData: 2022-05-23 06:11:20+00:00
                           2021-11-22 11:40:18+00:00
                           1601-01-01 00:04:17+00:00
    distinguishedName: CN=16-HPH私域共享-特权组,OU=16-HPH私域共享,OU=共享权限组,DC=syounggroup,DC=com
    groupType: -2147483646
    instanceType: 4
    name: 16-HPH私域共享-特权组
    objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=syounggroup,DC=com
    objectClass: top
                 group
    objectGUID: {9a4ebc1c-5b72-4fbe-bb1b-b8b3c2e5e2d5}
    objectSid: S-1-5-21-88358230-583260354-1133626278-13273
    sAMAccountName: $PUC000-30G07R1LB0CS
    sAMAccountType: 268435456
    uSNChanged: 26319542
    uSNCreated: 26319542
    whenChanged: 2021-11-22 11:14:51+00:00
    whenCreated: 2021-11-22 11:14:51+00:00

 

posted @ 2020-10-16 00:41  Anec  阅读(385)  评论(0编辑  收藏  举报