ResetAccountsAdminSDHolder.vbs

[meastaugh1]

Hi,

Can someone offer some help with modifying the above script? I need to address the issue addressed in KB817433. However, I'd rather only execute it against a certain OU and it's child OUs. My attempts so far have resulted the script in returning 0 accounts found.

many thanks
Mike

[saundersmatt]

i would change the line
oCmd.CommandText = "SELECT ADsPath FROM 'LDAP://" & sPDC & "/" & sDomain & "' WHERE objectCategory='person' and objectClass = 'user' AND adminCount = 1"

to read

oCmd.CommandText = "SELECT ADsPath FROM 'LDAP://" & sPDC & "/" & sDomain & "/ou=SearchOU,dc=your,dc=domain" & "' WHERE objectCategory='person' and objectClass = 'user' AND adminCount = 1"

Matt