The other day I was working on a powershell script to copy specific Active Directory attributes to a SQL database. I wanted to see if the destination SQL fields (which were varchar 100) would be able to contain the attributes, but I didn’t know the maximum lengths of the text in Active Directory. I hacked together a quick LDAP query to get all of the ‘rangeUpper’ values for each attribute. Here is that code:<\/p>\n
\r\n$myReport=@()\r\n\r\n$Base = \"\"\r\n$Filter = \"(&(objectCategory=attributeSchema)(rangeUpper=*))\"\r\n$Attributes = \"distinguishedName\"\r\n$Scope = \"subtree\"\r\n$Query = \"$Base;$Filter;$Attributes;$Scope\"\r\n$Connection = New-Object -ComObject \"ADODB.Connection\"\r\n$Command = New-Object -ComObject \"ADODB.Command\"\r\n$Connection.Open(\"Provider=ADsDSOObject;\")\r\n$Command.ActiveConnection = $Connection\r\n$Command.Properties.item(\"Size Limit\").value = 90000\r\n$Command.Properties.item(\"Page Size\").value = 90000\r\n$Command.CommandText = $Query\r\n$Recordset = $Command.Execute()\r\nDo {\r\n\t$dn = $Recordset.Fields.item(\"distinguishedName\") \r\n\t$dn = $dn.value\r\n\t\r\n\t$objSchema = Get-ADObject $dn\r\n\t\r\n\t$myReport+= New-Object psobject -Property @{\r\n\t\tLDAPAttribute = [string]$objSchema.lDAPDisplayName\r\n\t\tMaxValue = [string]$objSchema.rangeUpper\r\n\t}\r\n\t\r\n\tif ($Recordset.eof -ne $true) {$Recordset.MoveNext()}\r\n}\r\nUntil ($Recordset.eof)\r\n$Connection.Close > $null\r\n$myReport | Sort LDAPAttribute\r\n<\/code><\/pre>\nHope this can help you too!<\/p>\n","protected":false},"excerpt":{"rendered":"
The other day I was working on a powershell script to copy specific Active Directory attributes to a SQL database. I wanted to see if the destination SQL fields (which were varchar 100) would be able to contain the attributes, … Continue reading