Skip to main content

Posts

Showing posts from 2012

LDIFDE (LDAP Data Interchange Format Directory Exchange)

LDIFDE (LDAP Data Interchange Format Directory Exchange) A previous article described about CSVDE usage. This article will walk you through another tool LDIFDE (LDAP Data Interchange Format Directory Exchange), it is also a command prompt-based tool similar to CSVDE to export information from Active Directory. LDIFDE and CSVDE both are the tools that can be used to export data from Active Directory, and for creating AD objects by using data presented in LDIF or CSV format. The exported data can be filtered

CSVDE (Comma Separated Value Directory Exchange) Command Line Utility

CSVDE is a command line utility that allows administrators to import and export, but not to modify or delete, entries into or from Active Directory Domain Services (AD DS) using LDAP(Light weight directory access protocol). You can see the help for this command line utility by typing csvde /? at a command prompt. Syntax: csvde [-i] [-f FileName] [-s ServerName] [-c String1 String2] [-v] [-j Path] [-t PortNumber] [-d BaseDN] [-r LDAPFilter] [-p Scope] [-l LDAPAttributeList] [-o LDAPAttributeList] [-g] [-m] [-n] [-k] [-a UserDistinguishedName Password] [-b UserName Domain Password] Importing When an administrator wants to import entries from a file into the active directory, [-i] in above syntax indicates the import switch. The file you reference after the -f switch should be a comma separated value file.

Translate SIDs to Their Display Name

PsGetsid enables an administrator to translate SIDs to their display name and vice versa. It works on builtin accounts, domain accounts, and local accounts.  Usage: psgetsid [\\computer[,computer[,...] | @file] [-u username [-p password]]] [account|SID] If administrator is in need to see a computer's SID just pass the computer's name as a command-line argument. If administrator’s requirement is to see a user's SID, name the account (e.g. "administrator") on the command-line and an optional computer name. Administrator needs to specify a user name if the account he is running running from doesn't have administrative privileges on the computer he wants to query. If administrator doesn't specify a password as an option, PsGetSid will prompt for it so that administrator can type it in without any issue. PsGetSid is part of Sysinternals command-line tools named “PsTools” and can be downloaded from here .

Troubleshooting Memory Leak on Domain Controller in Lsass.exe Process

What is a memory leak? Application codes require that some amount of memory to be allocated, for storing values that will be worked with, and then deallocated when the code is finished working with them. This is a concern to Active Directory administrator because we don’t always have full control over all of the code which runs in our environment. Sometimes some applications have the specific problem of not being able to deallocate their memory usage when running on or against a domain controller, resulting in a memory leak. There can be memory leaks in either kernel or user mode but application derived memory leaks are by nature user mode leaks.

About Hari Shanker

Thanks for visiting my site! My name is Hari Shanker, this is my weblog about various technical subjects. cloud computing and the occasional personal topics too. PROFESSIONAL INFORMATION I’ve been in the Information Technology field for more than 16 years, starting out with desktop support. Along the way, I worked as a systems administrator, Active Directory Specialist, Azure Specialist. Most recently, I was the Solution architect for Microsoft Azure at Rackspace. Currently, I work for Cognizant as a Principal Architect for Cloud Transformation & Solutioning. PERSONAL INFORMATION I live with my parents in the New Delhi area. Much of my time remains busy in my office and activities on various technical forums. During my leisure time, I love to spend time with Family & Friends and spend holidays on Hill stations. DISCLAIMER Any views or opinions expressed here are strictly my own. I am a blogger who works for an organization/company, I am not an organiz...