Tag: Meta Data

Object Metadata

This option is used to check the metadata of the specified attribute for an object across all Domain Controllers in the domain.  This is a multi-threaded function to speed up the return of the results.  Each line represents the metadata for the attribute on the corresponding domain controller as specified by the Server column.  This option is perfect for checking that an attribute has been replicated across all the domain controllers.

The DN field is the DN of the object, and Attribute field is the name of the attribute to be checked.  This option can only check a single attribute at a time.

Object Metadata

AD Properties Dialog

The AD Properties dialog is available on context menus throughout NetTools, it provides a similar dialog as in AD User and Computers. The details and tabs change based on the object being displayed.

The button for Meta Data and Attributes will open the corresponding dialog based on the object being displayed.  When the cursor is position over a field the text tip displays the name of the attribute for the field.

Meta Data Dialog

On a number of the context menu, there is an option called Meta Data, this will show the meta data against the selected object.  The dialog will display the details in the msDS-ReplAttributeMetaData and msDS-ReplValueMetaData attributes.  The dialog looks like this:

The top pane displays the results from the replPropertyMetaData attribute, the bottom pane contains the details from msDS-ReplValueMetaData attribute.

LDAP Search – Attributes

The Attributes field defines what attributes should be returned by the query, the attributes are specified as a comma separated list. The attributes field also support an number of additional functions for formatting, decode types, and updates.

The Attributes field has the following format:

Syntax: [Attribute[;Conditional Attribute][;DecodeType][;Type][=<Op><Value>]][,][Meta.<Type>.<Attribute>[,] []

Attribute - the name of the attribute to be returned, the list of attributes is provided in a comma separated list, i.e. name, whencreated, pwdlastset.  If the attributes field is left blank all attributes of the object are returned, with the exception of constructed attributes.  

Conditional Attributes - Conditional Attributes allow the user to define the value that is returned based on a true or false conditional statement. See Conditional Attributes

DecodeType - the option is used to change the default DecodeType of an attribute i.e. LastLogonTimeStamp;int64.  See Decode Types for a full list of Decode Types 

Type - These are the Microsoft supported options that provide additional server side functionality, they are:

Range:x-x
Binary

=Op - These are the parameters to complete update queries. See Update Query

Meta.<Type>.<Attribute> - This provides the ability to return the meta data details of an attribute in a query result.  The meta data for an attribute includes the following fields - version number, local USN, originating server, time, and originating DC, any of these can be returned.  The meta data is from the server being queried, to see the meta across all DC use the Meta Data option.

Type:

ver - Version
lusn - Local USN
ousn - Originating USN
time - Time of change
dc - Originating DC

Attribute - The name of the attribute

Examples:

meta.ver.objectclass 
meta.time.pwdlastset
meta.dc.lastlogontimestamp

User Search

This option provides the capability to search for objects in the Active Directory, based on a user provided search string

  • Configured by default to return only User objects, but can search for anything
  • Search for objects at the domain or forest level.  Searches can be limited to specific domain contexts, or use the GC for full forest searches
  • Use GC to resolve foreign objects
  • Searches use ANR based queries for best performance
  • User definable columns
  • Context menu option to link the selected object to other functions
  • AD Properties, Meta data, and Attributes dialogs can displayed for returned objects
  • Previous searches are temporarily saved in dropdown list
  • Configuration changes are non-volatile
  • User Icons represent the account status, i.e. disabled or locked accounts

The Use With option on the context menu allows you to use the selected item with another option in NetTools, items on the menu will enabled based on the item selected.