search by owner

13 Mar 2009 7:34 PM

mtsint

How to search AD computers accounts by a particular owner
I want to see how many computer are own by jackwoooo

13 Mar 2009 7:41 PM

Lanwench [MVP - Exchange]

mts***@yahoo.com wrote:

> How to search AD computers accounts by a particular owner
> I want to see how many computer are own by jackwoooo

Hmmm. I didn't think computer accounts *had* an owner.

13 Mar 2009 10:42 PM

mtsint

On Mar 13, 12:41 pm, "Lanwench [MVP - Exchange]"
<lanwe***@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:

> mts***@yahoo.com wrote:
> > How to search AD computers accounts by a particular owner
> > I want to see how many computer are own by jackwoooo
>
> Hmmm. I didn't think computer accounts *had* an owner.

When I say owner, I mean the account which was used to join to the
domain. Isn't that account the owner of the computer object

14 Mar 2009 3:11 PM

Meinolf Weber [MVP-DS]

Hello mts***@yahoo.com,

You need to have auditing enabled 'Audit Account management' on the domain
controller's OU. Then you have to search for event id 645 646 647. These
are about computer accounts, 645 should be yours.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Show quoteHide quote

> On Mar 13, 12:41 pm, "Lanwench [MVP - Exchange]"
> <lanwe***@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:
>> mts***@yahoo.com wrote:
>>
>>> How to search AD computers accounts by a particular owner I want to
>>> see how many computer are own by jackwoooo
>>>
>> Hmmm. I didn't think computer accounts *had* an owner.
>>
> When I say owner, I mean the account which was used to join to the
> domain. Isn't that account the owner of the computer object
>

13 Mar 2009 8:03 PM

Richard Mueller [MVP]

<mts***@yahoo.com> wrote in message

news:eae6a0da-10f0-460b-adf2-2570d6f1e84b@s38g2000prg.googlegroups.com...
> How to search AD computers accounts by a particular owner
> I want to see how many computer are own by jackwoooo

If you mean who manages the computer, you can search for computers where the
managedBy attribute is the DN of the user. Otherwise, the only owner I know
of is the owner of the Security Descriptor of the object. I don't know of
any way to search for that. It is not saved in AD. You could retrieve the
DN's of all computer objects in the domain, bind to each, then check the
owner of the security descriptor. The owner will be in the format <NetBIOS
name of domain>\<sAMAccountName>, where sAMAccountName is the pre-Windows
2000 name of the user or group. To find the owner of a specified computer,
the VBScript code would be:

Set objComputer =
GetObject("LDAP://cn=MyComputer,ou=West,dc=MyDomain,dc=com")
Set objSecurityDescriptor = objComputer.Get("ntSecurityDescriptor")
Wscript.Echo "Owner: " & objSecurityDescriptor.Owner

You would need to repeat this for every computer in the domain.

--
Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--