Active Directory Cookbook for windows server 2003- P26:If you are familiar with the O'Reilly Cookbook format that can be seen in other popular books, such as the Perl Cookbook, Java Cookbook, and DNS and BIND Cookbook, then the layout of this book will not be anything new to you. The book is composed of 18 chapters, each containing 10-30 recipes for performing a specific Active Directory task. Within each recipe are four sections: problem, solution, discussion, and see also. | First I determine the time in seconds from 1970 for the date that we want to query computer inactivity against. That is take the current time and subtract the number of weeks we want to go back. Then I have to convert that number to a big integer. The last step is simply to perform an ADO query for all computers that have a lastLogonTimestamp less than or equal to the value I just calculated. See Also Recipe for finding users whose accounts are about to expire Recipe Changing the Maximum Number of Computers a User Can Join to the Domain Problem You want to grant users the ability to join more or fewer than 10 computers to a domain. This limit is called the machine account quota. Solution Using a graphical user interface 1. Open ADSI Edit. 2. Right-click on the domainDNS object for the domain you want to change and select Properties. 3. Edit the ms-DS-MachineAccountQuota attribute and enter the new quota value. 4. Click OK twice. Using a command-line interface In the following LDIF code replace DomainDN with the distinguished name of the domain you want to change and replace Quota with the new machine account quota dn DomainDN changetype modify replace ms-DS-MachineAccountQuota ms-DS-MachineAccountQuota Quota - If the LDIF file was named you would then run the following command ldifde -v -i -f Using VBScript This code sets the machine account quota for a domain. 261 ----- SCRIPT CONFIGURATION ------- intQuota Quota strDomain DomainDNSName . ----- END CONFIGURATION ---------- set objRootDSE GetObject LDAP strDomain RootDSE set objDomain GetObject LDAP defaultNamingContext ms-DS-MachineAccountQuota intQuota Updated user quota to intQuota Discussion In a default Active Directory installation members of the Authenticated Users group can add and join up to 10 computer accounts in .
