A call to the scripting daddys!

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

So, were trying to disable outlook mobile access to all users and found this nice script that does it, however, im a bit unsure of the Ldap query as its not like one im used to
which part would i chance to point it to a perticular OU in my forest?

Code:

On Error Resume Next
Set objRootDSE = GetObject("LDAP://rootDSE")
Set objUsers = GetObject("LDAP://cn=Users," & objRootDSE.Get("defaultNamingContext"))
' set msExchOmaAdminWirelessEnable to 7 if currently null
For Each objUser In objUsers
            strname = objUser.Get("name")
'            WScript.Echo "name: " & strname
            strWirelessEnabled = objUser.Get("msExchOmaAdminWirelessEnable")
            If strWirelessEnabled = "" Then
                        objUser.Put "msExchOmaAdminWirelessEnable", "7"
                        objUser.setinfo
            End If
            strWirelessEnabled = objUser.Get("msExchOmaAdminWirelessEnable")
Next
WScript.Echo "Mobile Services disabled for all users" 

im guessing these two

Code:

 Set objRootDSE = GetObject("LDAP://rootDSE")
 Set objUsers = GetObject("LDAP://cn=Users," & objRootDSE.Get("defaultNamingContext"))

would default naming context refur to the default parent domain, ie (local.pheo.org) and the concanate that to the Cn=users, part
leading to something like
"cn=users, dn=local, dn=pheo, dn=org"

or something like that?
any help appreciated folks

 

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

I reckon you're right Ryan, if the OU you are pointing to is one of the default AD containers such as Users or Computers then you need to use CN=

If you are pointing to an OU tree you have created such as Users.London.local.Pheo.org then you would use OU=Users,OU=London,DN=local,DN=Pheo,DN=org

 

right so i would be safe just hard codeing that as an ldap query rather than worrying about that dynamic root ldap stuff its trying to be clever and do?