EnumProp Examples

Example One


c:\>enumprop "LDAP://cn=administrator,cn=users,dc=user5,dc=com"

LDAP://cn=administrator,cn=users,dc=user5,dc=com: 29 set properties.

 1: accountExpires: 9223372036854775807
 2: badPasswordTime: 0
 3: badPwdCount: 0
 4: codePage: 0
 5: cn: Administrator
 6: countryCode: 0
 7: description: Built-in account for administering the computer/domain
 8: instanceType: 4
 9: isCriticalSystemObject:  Type 6
10: memberOf:
        CN=Domain Admins,CN=Users,DC=user5,DC=com
        CN=Enterprise Admins,CN=Users,DC=user5,DC=com
        CN=Schema Admins,CN=Users,DC=user5,DC=com
        CN=Administrators,CN=Builtin,DC=user5,DC=com
11: lastLogoff: 0
12: lastLogon: 125589045061875000
13: logonCount: 2
14: nTSecurityDescriptor:
15: distinguishedName: CN=Administrator,CN=Users,DC=user5,DC=com
16: objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=user5,DC=com
17: objectClass:
        top
        person
        organizationalPerson
        user
18: objectGUID: {6501886D-9A84-11D2-BC7C-00C04F82FE9D}
19: objectSid: S-1-5-21-842925246-1454471165-682003330-500
20: primaryGroupID: 513
21: pwdLastSet: 125589047530625000
22: name: Administrator
23: sAMAccountName: Administrator
24: sAMAccountType: 805306368
25: userAccountControl: 66048
26: uSNChanged: 2264
27: uSNCreated: 2113
28: whenChanged: 23/12/1998 17:39:13
29: whenCreated: 23/12/1998 17:27:47

Example Two


c:>enumprop /attr:objectguid,distinguishedname,objectsid "LDAP://cn=administrator,cn=users,dc=user5,dc=com"

LDAP://cn=administrator,cn=users,dc=user5,dc=com

 1: distinguishedName: CN=Administrator,CN=Users,DC=user5,DC=com
 2: objectGUID: {6501886D-9A84-11D2-BC7C-00C04F82FE9D}
 3: objectSid: S-1-5-21-842925246-1454471165-682003330-500

Example Three


c:>enumprop /sec "LDAP://cn=administrator,cn=users,dc=user5,dc=com"

LDAP://cn=administrator,cn=users,dc=user5,dc=com

Revision: 1
Control: 35844
Owner: BUILTIN\Administrators
Group: BUILTIN\Administrators
No System ACL
Discretionary ACL:
   AclRevision: 4
   AceCount: 7
   Ace #: 1
      Trustee: Everyone
      AccessMask: 0x130
         ADS_RIGHT_DS_READ_PROP
         ADS_RIGHT_DS_WRITE_PROP
      AceType: 0x5
         ADS_ACETYPE_ACCESS_ALLOWED_OBJECT  - ?
      AceFlags: 0x0
      Flags: 0x1
         ACE_OBJECT_TYPE_PRESENT - The ObjectType member contains a GUID
      ObjectType: {AB721A53-1E2F-11D0-9819-00AA0040529B}
         Control: Change Password
      InheritedObjectType: NULL
   Ace #: 2
      Trustee: NT AUTHORITY\Authenticated Users
      AccessMask: 0x10
         ADS_RIGHT_DS_READ_PROP
      AceType: 0x0
         ADS_ACETYPE_ACCESS_ALLOWED - Allows Trustee access
      AceFlags: 0x0
      Flags: 0x0
      ObjectType: NULL
      InheritedObjectType: NULL
   Ace #: 3
      Trustee: NT AUTHORITY\Authenticated Users
      AccessMask: 0x20028
         ADS_RIGHT_READ_CONTROL
         ADS_RIGHT_DS_SELF
         ADS_RIGHT_DS_WRITE_PROP
      AceType: 0x5
         ADS_ACETYPE_ACCESS_ALLOWED_OBJECT  - ?
      AceFlags: 0x0
      Flags: 0x1
         ACE_OBJECT_TYPE_PRESENT - The ObjectType member contains a GUID
      ObjectType: {BC0AC240-79A9-11D0-9020-00C04FC2D4CF}
         Control: Modify Group Membership
      InheritedObjectType: NULL
   Ace #: 4
      Trustee: BUILTIN\Administrators
      AccessMask: 0xf01ff
         ADS_RIGHT_DELETE
         ADS_RIGHT_READ_CONTROL
         ADS_RIGHT_WRITE_DAC
         ADS_RIGHT_WRITE_OWNER
         ADS_RIGHT_DS_CREATE_CHILD
         ADS_RIGHT_DS_DELETE_CHILD
         ADS_RIGHT_ACTRL_DS_LIST
         ADS_RIGHT_DS_SELF
         ADS_RIGHT_DS_READ_PROP
         ADS_RIGHT_DS_WRITE_PROP
         ADS_RIGHT_DS_DELETE_TREE
         ADS_RIGHT_DS_LIST_OBJECT
      AceType: 0x0
         ADS_ACETYPE_ACCESS_ALLOWED - Allows Trustee access
      AceFlags: 0x0
      Flags: 0x0
      ObjectType: NULL
      InheritedObjectType: NULL
   Ace #: 5
      Trustee: NT AUTHORITY\SELF
      AccessMask: 0x130
         ADS_RIGHT_DS_READ_PROP
         ADS_RIGHT_DS_WRITE_PROP
      AceType: 0x5
         ADS_ACETYPE_ACCESS_ALLOWED_OBJECT  - ?
      AceFlags: 0x0
      Flags: 0x1
         ACE_OBJECT_TYPE_PRESENT - The ObjectType member contains a GUID
      ObjectType: {AB721A53-1E2F-11D0-9819-00AA0040529B}
         Control: Change Password
      InheritedObjectType: NULL
   Ace #: 6
      Trustee: NT AUTHORITY\SELF
      AccessMask: 0x10
         ADS_RIGHT_DS_READ_PROP
      AceType: 0x0
         ADS_ACETYPE_ACCESS_ALLOWED - Allows Trustee access
      AceFlags: 0x0
      Flags: 0x0
      ObjectType: NULL
      InheritedObjectType: NULL
   Ace #: 7
      Trustee: USER5\Enterprise Admins
      AccessMask: 0xf01fd
         ADS_RIGHT_DELETE
         ADS_RIGHT_READ_CONTROL
         ADS_RIGHT_WRITE_DAC
         ADS_RIGHT_WRITE_OWNER
         ADS_RIGHT_DS_CREATE_CHILD
         ADS_RIGHT_ACTRL_DS_LIST
         ADS_RIGHT_DS_SELF
         ADS_RIGHT_DS_READ_PROP
         ADS_RIGHT_DS_WRITE_PROP
         ADS_RIGHT_DS_DELETE_TREE
         ADS_RIGHT_DS_LIST_OBJECT
      AceType: 0x0
         ADS_ACETYPE_ACCESS_ALLOWED - Allows Trustee access
      AceFlags: 0x13
         ADS_ACEFLAG_INHERIT_ACE - Child container objects inherit ace, inherited unless NO_PROPAGATE_INHERIT_ACE is set
         ADS_ACEFLAG_VALID_INHERIT_FLAGS -
         ADS_ACEFLAG_INHERITED_ACE - This ACE was inherited
      Flags: 0x0
      ObjectType: NULL
      InheritedObjectType: NULL