Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Any danger in using CSVDE in export mode?
Any danger in using CSVDE in export mode? [message #318256] Sun, 15 November 2009 12:24 Go to next message
Alan  is currently offline Alan  Belgium
Messages: 112
Registered: August 2009
Senior Member
Hello,

Need some advice and reassurance please.

I have to export, every day, some attributes of all the user accounts
in our W2K3 AD. I'm using an ordinary user account, not one with admin
rights to run the export job. I intend to schedule it.

Is there any danger doing this?

Already exported a couple of OUs as a test without any problems, now I
want to export the entire AD. Sorry but I'm paranoid - and a contract
worker.

Thanks,

- Alan.
Re: Any danger in using CSVDE in export mode? [message #318262 is a reply to message #318256] Sun, 15 November 2009 12:34 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Alan,

You will not remove them from AD, if you mean this as you already saw. Maybe
you can make some performance test depending on the hardware of the server
where you connect to, to see if it slow down. So you can schedule this to
non-working hours.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello,
>
> Need some advice and reassurance please.
>
> I have to export, every day, some attributes of all the user accounts
> in our W2K3 AD. I'm using an ordinary user account, not one with admin
> rights to run the export job. I intend to schedule it.
>
> Is there any danger doing this?
>
> Already exported a couple of OUs as a test without any problems, now I
> want to export the entire AD. Sorry but I'm paranoid - and a contract
> worker.
>
> Thanks,
>
> - Alan.
>
Re: Any danger in using CSVDE in export mode? [message #318296 is a reply to message #318262] Sun, 15 November 2009 13:31 Go to previous messageGo to next message
Alan  is currently offline Alan  Belgium
Messages: 112
Registered: August 2009
Senior Member
Hi Meinof,

The performane part doesn't worry me because we have 5-6 domain
controllers for about 4000 users.

Yes, I'm worried that I could somehow damage the objects that I export
or even AD itself. Is that possible using a non-admin account and
exporting only?

Thanks,

- Alan.

On Nov 15, 8:34 pm, Meinolf Weber [MVP-DS] <meiweb@(nospam)gmx.de>
wrote:
> Hello Alan,
>
> You will not remove them from AD, if you mean this as you already saw. Maybe
> you can make some performance test depending on the hardware of the server
> where you connect to, to see if it slow down. So you can schedule this to
> non-working hours.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > Hello,
>
> > Need some advice and reassurance please.
>
> > I have to export, every day, some attributes of all the user accounts
> > in our W2K3 AD. I'm using an ordinary user account, not one with admin
> > rights to run the export job. I intend to schedule it.
>
> > Is there any danger doing this?
>
> > Already exported a couple of OUs as a test without any problems, now I
> > want to export the entire AD. Sorry but I'm paranoid - and a contract
> > worker.
>
> > Thanks,
>
> > - Alan.
Re: Any danger in using CSVDE in export mode? [message #318318 is a reply to message #318296] Sun, 15 November 2009 14:08 Go to previous messageGo to next message
rlmueller-nospam  is currently offline rlmueller-nospam  United States
Messages: 292
Registered: July 2009
Senior Member
No danger. This is done all the time.

--
Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--

"Alan" <bruguy@gmail.com> wrote in message
news:c2cc8a5a-3677-4031-bd3e-7a88d0ba052a@g27g2000yqn.googlegroups.com...
Hi Meinof,

The performane part doesn't worry me because we have 5-6 domain
controllers for about 4000 users.

Yes, I'm worried that I could somehow damage the objects that I export
or even AD itself. Is that possible using a non-admin account and
exporting only?

Thanks,

- Alan.

On Nov 15, 8:34 pm, Meinolf Weber [MVP-DS] <meiweb@(nospam)gmx.de>
wrote:
> Hello Alan,
>
> You will not remove them from AD, if you mean this as you already saw.
> Maybe
> you can make some performance test depending on the hardware of the server
> where you connect to, to see if it slow down. So you can schedule this to
> non-working hours.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > Hello,
>
> > Need some advice and reassurance please.
>
> > I have to export, every day, some attributes of all the user accounts
> > in our W2K3 AD. I'm using an ordinary user account, not one with admin
> > rights to run the export job. I intend to schedule it.
>
> > Is there any danger doing this?
>
> > Already exported a couple of OUs as a test without any problems, now I
> > want to export the entire AD. Sorry but I'm paranoid - and a contract
> > worker.
>
> > Thanks,
>
> > - Alan.
Re: Any danger in using CSVDE in export mode? [message #318383 is a reply to message #318296] Sun, 15 November 2009 16:10 Go to previous messageGo to next message
Marcin  is currently offline Marcin  United States
Messages: 273
Registered: July 2009
Senior Member
Alan,
assuming that you haven't modified default AD permissions granted to
Authenticated Users, you should be able to perform the export using a
non-privileged account - but as Richard and Meinolf have stated, no damage
is to be expected...

hth
Marcin

"Alan" <bruguy@gmail.com> wrote in message
news:c2cc8a5a-3677-4031-bd3e-7a88d0ba052a@g27g2000yqn.googlegroups.com...
Hi Meinof,

The performane part doesn't worry me because we have 5-6 domain
controllers for about 4000 users.

Yes, I'm worried that I could somehow damage the objects that I export
or even AD itself. Is that possible using a non-admin account and
exporting only?

Thanks,

- Alan.

On Nov 15, 8:34 pm, Meinolf Weber [MVP-DS] <meiweb@(nospam)gmx.de>
wrote:
> Hello Alan,
>
> You will not remove them from AD, if you mean this as you already saw.
> Maybe
> you can make some performance test depending on the hardware of the server
> where you connect to, to see if it slow down. So you can schedule this to
> non-working hours.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > Hello,
>
> > Need some advice and reassurance please.
>
> > I have to export, every day, some attributes of all the user accounts
> > in our W2K3 AD. I'm using an ordinary user account, not one with admin
> > rights to run the export job. I intend to schedule it.
>
> > Is there any danger doing this?
>
> > Already exported a couple of OUs as a test without any problems, now I
> > want to export the entire AD. Sorry but I'm paranoid - and a contract
> > worker.
>
> > Thanks,
>
> > - Alan.
Re: Any danger in using CSVDE in export mode? [message #318412 is a reply to message #318296] Sun, 15 November 2009 17:05 Go to previous messageGo to next message
Dave Blackshaw  is currently offline Dave Blackshaw
Messages: 1
Registered: November 2009
Junior Member
There is little, if any, risk in doing this.

However, bear in mind that the limited user account may not be able to view
all user objects, depending on the security configuration of the
domain/forest. It is generally good practice to hide the Administrator and
privileged accounts in an OU with Deny Read access to normal users.

Dave

"Alan" <bruguy@gmail.com> wrote in message
news:c2cc8a5a-3677-4031-bd3e-7a88d0ba052a@g27g2000yqn.googlegroups.com...
> Hi Meinof,
>
> The performane part doesn't worry me because we have 5-6 domain
> controllers for about 4000 users.
>
> Yes, I'm worried that I could somehow damage the objects that I export
> or even AD itself. Is that possible using a non-admin account and
> exporting only?
>
> Thanks,
>
> - Alan.
>
> On Nov 15, 8:34 pm, Meinolf Weber [MVP-DS] <meiweb@(nospam)gmx.de>
> wrote:
>> Hello Alan,
>>
>> You will not remove them from AD, if you mean this as you already saw.
>> Maybe
>> you can make some performance test depending on the hardware of the
>> server
>> where you connect to, to see if it slow down. So you can schedule this to
>> non-working hours.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>>
>> > Hello,
>>
>> > Need some advice and reassurance please.
>>
>> > I have to export, every day, some attributes of all the user accounts
>> > in our W2K3 AD. I'm using an ordinary user account, not one with admin
>> > rights to run the export job. I intend to schedule it.
>>
>> > Is there any danger doing this?
>>
>> > Already exported a couple of OUs as a test without any problems, now I
>> > want to export the entire AD. Sorry but I'm paranoid - and a contract
>> > worker.
>>
>> > Thanks,
>>
>> > - Alan.
>
Re: Any danger in using CSVDE in export mode? [message #318620 is a reply to message #318412] Mon, 16 November 2009 01:28 Go to previous messageGo to next message
Alan  is currently offline Alan  Belgium
Messages: 112
Registered: August 2009
Senior Member
Thanks to all for the reassurance. Much appreciated!


On Nov 16, 1:05 am, "Dave Blackshaw" <daverav...@hotmail.com> wrote:
> There is little, if any, risk in doing this.
>
> However, bear in mind that the limited user account may not be able to view
> all user objects, depending on the security configuration of the
> domain/forest.  It is generally good practice to hide the Administrator and
> privileged accounts in an OU with Deny Read access to normal users.
>
> Dave
>
> "Alan" <bru...@gmail.com> wrote in message
>
> news:c2cc8a5a-3677-4031-bd3e-7a88d0ba052a@g27g2000yqn.googlegroups.com...
>
> > Hi Meinof,
>
> > The performane part doesn't worry me because we have 5-6 domain
> > controllers for about 4000 users.
>
> > Yes, I'm worried that I could somehow damage the objects that I export
> > or even AD itself. Is that possible using a non-admin account and
> > exporting only?
>
> > Thanks,
>
> > - Alan.
>
> > On Nov 15, 8:34 pm, Meinolf Weber [MVP-DS] <meiweb@(nospam)gmx.de>
> > wrote:
> >> Hello Alan,
>
> >> You will not remove them from AD, if you mean this as you already saw.
> >> Maybe
> >> you can make some performance test depending on the hardware of the
> >> server
> >> where you connect to, to see if it slow down. So you can schedule this to
> >> non-working hours.
>
> >> Best regards
>
> >> Meinolf Weber
> >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> confers
> >> no rights.
> >> ** Please do NOT email, only reply to Newsgroups
> >> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
> >> > Hello,
>
> >> > Need some advice and reassurance please.
>
> >> > I have to export, every day, some attributes of all the user accounts
> >> > in our W2K3 AD. I'm using an ordinary user account, not one with admin
> >> > rights to run the export job. I intend to schedule it.
>
> >> > Is there any danger doing this?
>
> >> > Already exported a couple of OUs as a test without any problems, now I
> >> > want to export the entire AD. Sorry but I'm paranoid - and a contract
> >> > worker.
>
> >> > Thanks,
>
> >> > - Alan.
>
>
Re: Any danger in using CSVDE in export mode? [message #318647 is a reply to message #318620] Mon, 16 November 2009 02:38 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Alan,

You're welcome.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Thanks to all for the reassurance. Much appreciated!
>
> On Nov 16, 1:05 am, "Dave Blackshaw" <daverav...@hotmail.com> wrote:
>
>> There is little, if any, risk in doing this.
>>
>> However, bear in mind that the limited user account may not be able
>> to view all user objects, depending on the security configuration of
>> the domain/forest. It is generally good practice to hide the
>> Administrator and privileged accounts in an OU with Deny Read access
>> to normal users.
>>
>> Dave
>>
>> "Alan" <bru...@gmail.com> wrote in message
>>
>> news:c2cc8a5a-3677-4031-bd3e-7a88d0ba052a@g27g2000yqn.googlegroups.co
>> m...
>>
>>> Hi Meinof,
>>>
>>> The performane part doesn't worry me because we have 5-6 domain
>>> controllers for about 4000 users.
>>>
>>> Yes, I'm worried that I could somehow damage the objects that I
>>> export or even AD itself. Is that possible using a non-admin account
>>> and exporting only?
>>>
>>> Thanks,
>>>
>>> - Alan.
>>>
>>> On Nov 15, 8:34 pm, Meinolf Weber [MVP-DS] <meiweb@(nospam)gmx.de>
>>> wrote:
>>>
>>>> Hello Alan,
>>>>
>>>> You will not remove them from AD, if you mean this as you already
>>>> saw.
>>>> Maybe
>>>> you can make some performance test depending on the hardware of the
>>>> server
>>>> where you connect to, to see if it slow down. So you can schedule
>>>> this to
>>>> non-working hours.
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers
>>>> no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> Hello,
>>>>>
>>>>> Need some advice and reassurance please.
>>>>>
>>>>> I have to export, every day, some attributes of all the user
>>>>> accounts in our W2K3 AD. I'm using an ordinary user account, not
>>>>> one with admin rights to run the export job. I intend to schedule
>>>>> it.
>>>>>
>>>>> Is there any danger doing this?
>>>>>
>>>>> Already exported a couple of OUs as a test without any problems,
>>>>> now I want to export the entire AD. Sorry but I'm paranoid - and a
>>>>> contract worker.
>>>>>
>>>>> Thanks,
>>>>>
>>>>> - Alan.
>>>>>
Re: Any danger in using CSVDE in export mode? [message #319276 is a reply to message #318256] Mon, 16 November 2009 14:47 Go to previous message
pbbergs  is currently offline pbbergs  United States
Messages: 1024
Registered: July 2009
Senior Member
This is a read only process.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Alan" <bruguy@gmail.com> wrote in message
news:c0b5cb4d-2d50-421e-8331-db2479f20005@37g2000yqm.googlegroups.com...
> Hello,
>
> Need some advice and reassurance please.
>
> I have to export, every day, some attributes of all the user accounts
> in our W2K3 AD. I'm using an ordinary user account, not one with admin
> rights to run the export job. I intend to schedule it.
>
> Is there any danger doing this?
>
> Already exported a couple of OUs as a test without any problems, now I
> want to export the entire AD. Sorry but I'm paranoid - and a contract
> worker.
>
> Thanks,
>
> - Alan.
>
Previous Topic:password change PDC
Next Topic:Revoked Certificate in AD DS
Goto Forum:
  


Current Time: Wed Jan 17 04:12:21 MST 2018

Total time taken to generate the page: 0.02372 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software