{"id":71013,"date":"2004-11-12T13:34:00","date_gmt":"2004-11-12T13:34:00","guid":{"rendered":"https:\/\/blogs.technet.microsoft.com\/heyscriptingguy\/2004\/11\/12\/how-can-i-tell-if-an-ou-has-any-user-accounts-in-it\/"},"modified":"2004-11-12T13:34:00","modified_gmt":"2004-11-12T13:34:00","slug":"how-can-i-tell-if-an-ou-has-any-user-accounts-in-it","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/scripting\/how-can-i-tell-if-an-ou-has-any-user-accounts-in-it\/","title":{"rendered":"How Can I Tell If an OU Has Any User Accounts In It?"},"content":{"rendered":"

\"Hey, \n

Hey, Scripting Guy! How can I tell if an OU has any user accounts in it?

— RL<\/P>\"Spacer\"\"Hey,\"Script<\/A> \n

Hey, RL. As a matter of fact, there is<\/I> a way to determine whether or not an OU contains any user accounts: all you have to do is search just that OU<\/I> for nothing but<\/I> user accounts. When you perform a search, any \u201chits\u201d (in this case, any user accounts that are found) come back as part of a recordset. When you get the recordset back, all you have to do is check the value of the RecordCount property. If the value is 0, then there aren\u2019t any user accounts in the OU; if the value is anything other than 0, then that\u2019s how many user accounts were found. In other words, if the RecordCount is 17, then there are 17 user accounts in that OU. Child\u2019s play.<\/P>\n

Here\u2019s what the script looks like:<\/P>

On Error Resume Next<\/p>\n
Const ADS_SCOPE_ONELEVEL = 1<\/p>\n
Set objConnection = CreateObject(“ADODB.Connection”)\nSet objCommand =   CreateObject(“ADODB.Command”)\nobjConnection.Provider = “ADsDSOObject”\nobjConnection.Open “Active Directory Provider”\nSet objCommand.ActiveConnection = objConnection<\/p>\n
objCommand.Properties(“Page Size”) = 1000\nobjCommand.Properties(“Searchscope”) = ADS_SCOPE_ONELEVEL <\/p>\n
objCommand.CommandText = _\n    “SELECT Name FROM ‘LDAP:\/\/OU=finance,dc=fabrikam,dc=com’ WHERE objectCategory=’user'”  \nSet objRecordSet = objCommand.Execute<\/p>\n
Wscript.Echo \u201cNumber of user accounts: \u201c &  objRecordSet.RecordCount\n<\/PRE>\n
We can\u2019t provide a detailed explanation of how an Active Directory search script works in this column; if you\u2019re interested in knowing more about searching Active Directory, you might want to look at a Webcast<\/B><\/A> we did on this topic a few months ago. However, there are three things that we will<\/I> point out.<\/P>\n
First, note that we begin by defining a constant named ADS_SCOPE_ONELEVEL<\/B> and setting it to 1. This constant tells the script to search only<\/I> the target container; if there are any OUs nested within this OU, they won\u2019t get searched. If you want to search child OUs as well, then use the constant ADS_SCOPE_SUBTREE and set the value to 2.<\/P>\n
Second, make sure that you start the search in the target OU. Notice that our CommandText says SELECT Name FROM ‘LDAP:\/\/OU=finance,dc=fabrikam,dc=com’<\/B>. We don\u2019t want to start in the domain root (dc=fabrikam,dc=com), we want to start in the Finance OU.<\/P>\n
Finally, we\u2019re searching only for user accounts; hence the clause WHERE objectCategory=’user’<\/B>. What if you wanted to know if there were any computer accounts in the OU? Then just change the WHERE clause to this:<\/P>
WHERE objectCategory=’computer’\n<\/PRE>\n
What if you just wanted to know if anything<\/I> was in the OU? (For example, perhaps you want to delete the OU, but only if it\u2019s empty.) In that case, you wouldn\u2019t use a WHERE clause at all, but would instead use this CommandText:<\/P>
SELECT Name FROM ‘LDAP:\/\/OU=finance,dc=fabrikam,dc=com’\n<\/PRE>\n
Active Directory searching is extremely powerful and extremely useful, and we\u2019d like to see people make more and better use of it. If that\u2019s the case, then shouldn\u2019t we Scripting Guys be doing something to make it easier for people to get started with Active Directory searching? Funny you should mention that; we just might have something for you in a week or two. Stay tuned!<\/P><\/p>\n","protected":false},"excerpt":{"rendered":"
Hey, Scripting Guy! How can I tell if an OU has any user accounts in it?— RL Hey, RL. As a matter of fact, there is a way to determine whether or not an OU contains any user accounts: all you have to do is search just that OU for nothing but user accounts. When […]<\/p>\n","protected":false},"author":595,"featured_media":87096,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[7,43,3,8,5],"class_list":["post-71013","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scripting","tag-active-directory","tag-ous","tag-scripting-guy","tag-searching-active-directory","tag-vbscript"],"acf":[],"blog_post_summary":"
Hey, Scripting Guy! How can I tell if an OU has any user accounts in it?— RL Hey, RL. As a matter of fact, there is a way to determine whether or not an OU contains any user accounts: all you have to do is search just that OU for nothing but user accounts. When […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/71013","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/users\/595"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/comments?post=71013"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/71013\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media\/87096"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media?parent=71013"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/categories?post=71013"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/tags?post=71013"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}