Reporting from multiple domain controllers

[Guest]

When running the Exporter Pro on AD (Users, Groups...) / Detailed User and checking against multiple domain controllers I'm getting different data than what is displayed in Hyena's AD Query for Users (Detailed - General). For some reason the export is only listing one of the domain controllers instead of all the DC's, unlike the AD query which shows the one with the most recent info. Is there a way to specify what field to export the most recent data from? Or can I run the report against DC's separately and combine the data manually after exporting it?

The Hyena query is very useful, I'm just having some problems on the consistency of the exported data compared to the AD query.

[kstanush]

Re: Reporting from multiple domain controllers

I'm not sure that I understand what you are seeing. Unless you force them otherwise, both Hyena and Exporter Pro will select their own domain controller when getting data from AD. By default, Hyena will use the 'PDC' for all DC access, and Exporter Pro lets Windows decide. You can force a particular DC into Hyena, with EP its a bit harder, but you can force a DC name into the object path. Without using the exact same DC on both applications, you will probably be seeing data from two different DCs, but it should be almost the same except for recent changes that havn't replicated over.

[Guest]

Re: Reporting from multiple domain controllers

The information for Last Logon is different in the Export than it is when looking at Last Logon in Hyena's view.

In the export file ad_users.txt the Object Path is only specifing one server/DC. and of course thats the data that Last Logon is based on in the exported file.

Can you explain the steps to force a particular DC with EP?

<div class="ubbcode-block"><div class="ubbcode-header">Quote:</div><div class="ubbcode-body">Originally posted by kstanush:
<span style="font-weight: bold"> You can force a particular DC into Hyena, with EP its a bit harder, but you can force a DC name into the object path. Without using the exact same DC on both applications, you will probably be seeing data from two different DCs, but it should be almost the same except for recent changes that havn't replicated over.</span></div></div>

[kstanush]

Re: Reporting from multiple domain controllers

I assume that you have turned on the exporting option under the "Set Options" button for the AD export to get all of the logon information from all controllers. There is an option on this dialog to show the logon information for each controller or for a consolidated list. I would for troubleshooting check the option to show each controller separately for now, as that way you can compare it to Hyena's output.

To force a particular DC into the path, use the format:

LDAP://server/CN=Users,CN=Account,DC=domain,DC=com, for example

You can enter 'server' either as a Netbios or (better) dns of a domain controller.

However, I don't know what this will do when exporting last logon information, since EP has to reformat the path anyway for each DC. Putting a specific DC is only applicable for a standard AD export when you just want to optimize where the data is coming from.