search for: iscriticalsyst

...ange' data value, doing some thing (eg, disabling it ;-) if it is too far. I've found that my script get also some 'dns-*' account; looking at data i've found that the account associated with the DC with FSMO roles (and the dc where i've firstly deployed the domain) have: isCriticalSystemObject: TRUE while all the other DC NO, so the query: (&(objectClass=user)(!(objectClass=computer))(!(isCriticalSystemObject=TRUE))(!(userAccountControl:1.2.840.113556.1.4.803:=2))) work as expected, but filter out only the dns-* account of the FSMO roles DC, not the other DC. Googling a...

...if it is too far. > > > > I've found that my script get also some 'dns-*' account; looking at > > data i've found that the account associated with the DC with FSMO > > roles (and the dc where i've firstly deployed the domain) have: > > > > isCriticalSystemObject: TRUE > Not sure where that came from, both my dns-* users do not have that > line We probably should add it however.  ;-) > > > > > > while all the other DC NO, so the query: > > > > (&(objectClass=user)(!(objectClass=computer))(!(isCriticalSys...