Are there any command line options available to know the (user)account type?
hemanth.thummala at nutanix.com
Fri Feb 16 20:01:09 UTC 2018
Correct. Looks like that’s the only authoritative way to identify a machine account. We are able to get this information using ldapsearch query using anonymous bind.
But, we would like to know if this ldapsearch anonymous bind works all the time to query for “SamAccountType” attribute for any user account. Is there a possibility that this anonymous check can be blocked by placing any restrictions on the Active Directory objects?
On 16/02/18, 11:41 AM, "Rowland Penny" <rpenny at samba.org> wrote:
On Fri, 16 Feb 2018 19:30:31 +0000
Hemanth Thummala via samba-technical <samba-technical at lists.samba.org>
> Yes. Looks like DC only returning the type as user SID.
> Wondering when the DC can return type as “SidTypeComputer” if not for
> the machine account names.
I think the attribute you are looking for is 'sAMAccountType', a users
is '805306368' and a computers is '805306369'
More information about the samba-technical