VBscript 尝试查询 AD 用户最近 30 天没有输出

Question

我有一个有效的查询，但它抓住了AD中的所有用户，我试图将其缩小到过去90天。问题是即使查询确实运行，我也不再有任何输出。我知道我的数学是错误的，不会起飞 90 天。任何人都可以提供帮助吗？

        Dim currentDate
    currentDate = DateDiff("s", CDate("1/1/1970"), Now()) * 1000#
    currentDate = currentDate - 7776000000# 'Subtracts 90 days
'Does the query
    objCommand.CommandText = _
    "<LDAP://" & strDN & ">;" & _
    "(&(objectclass=user)(objectcategory=person)(lastLogonTimestamp<=" & currentDate & "));" & _
    "adspath,distinguishedname,sAMAccountName,lastLogonTimestamp,DisplayName,WhenCreated,userAccountControl;subtree"
'Output the query info
    Set objRecordSet = objCommand.Execute
    rngOut.CurrentRegion.Offset(2).ClearContents
    While Not objRecordSet.EOF
        rngOut.value = objRecordSet.Fields("DisplayName").value
        Set rngOut = rngOut.Offset(0, 1)
        rngOut.value = objRecordSet.Fields("sAMAccountName").value
        Set rngOut = rngOut.Offset(0, 1)
        rngOut.value = objRecordSet.Fields("WhenCreated").value
        Set rngOut = rngOut.Offset(0, 1)
        On Error Resume Next
        Set objDate = objRecordSet.Fields("lastLogonTimestamp").value
        If (Err.Number <> 0) Then
            On Error GoTo 0
            dtmDate = ""
        Else
            On Error GoTo 0
            lngHigh = objDate.HighPart
            lngLow = objDate.LowPart
            If (lngLow < 0) Then
                lngHigh = lngHigh + 1
            End If
            If (lngHigh = 0) And (lngLow = 0) Then
                dtmDate = ""
            Else
                dtmDate = #1/1/1601# + (((lngHigh * (2 ^ 32)) _
                    + lngLow) / 600000000) / 1440
            End If
        End If
        rngOut.value = dtmDate
        Set rngOut = rngOut.Offset(0, 1)
        rngOut.value = objRecordSet.Fields("distinguishedName").value
        Set rngOut = rngOut.Offset(0, 1)
        Set Uservar = objRecordSet.Fields("userAccountControl")
        If Uservar And 2 Then
            rngOut.value = "Disabled"
            rngOut.Font.ColorIndex = 3
        Else
            rngOut.value = "Enabled"
            rngOut.Font.ColorIndex = 0
        End If
        Set rngOut = rngOut.Offset(1, -5)
        objRecordSet.MoveNext
    Wend

我有这个工作，但只有当我(lastLogonTimestamp<=" & currentDate & "));更改为(lastLogon<=" & currentDate & "));并且对于我想要的，这才没有显示正确的用户群。谁能告诉我为什么？

Answer 1

如 VBScript 标签 wiki 中所述，VBScript 不会扩展字符串中的变量，因此您需要更改以下内容：

objCommand.CommandText = _
  "<LDAP://" & strDN & ">;" & _
  "(&(objectclass=user)(objectcategory=person)(lastLogonTimestamp>=currentDate));" & _
  "adspath,distinguishedname,sAMAccountName,lastLogon,DisplayName,WhenCreated,userAccountControl;subtree"

进入这个：

objCommand.CommandText = _
  "<LDAP://" & strDN & ">;" & _
  "(&(objectclass=user)(objectcategory=person)(lastLogonTimestamp>=" & currentDate & "));" & _
  "adspath,distinguishedname,sAMAccountName,lastLogon,DisplayName,WhenCreated,userAccountControl;subtree"

另外，我建议将当前日期计算为正常的Date值，例如：

maxAge = 30 'days
currentDate = Now - maxAge

或者像这样：

maxAge = 30 'days
currentDate = DateAdd("d", -maxAge, Now)

然后使用Richard L. Mueller的这段代码将其转换为整数8值：

Function DateToInt8(d)
  biasKey  = CreateObject("Wscript.Shell").RegRead("HKLMSystem" & _
    "CurrentControlSetControlTimeZoneInformationActiveTimeBias")
  If (UCase(TypeName(biasKey)) = "LONG") Then
    bias = biasKey
  ElseIf (UCase(TypeName(biasKey)) = "VARIANT()") Then
    bias = 0
    For k = 0 To UBound(biasKey)
      bias = bias + (biasKey(k) * 256^k)
    Next
  End If
  DateToInt8 = CStr(DateDiff("s", #1/1/1601#, DateAdd("n", bias, d))) & "0000000"
End Function
...
objCommand.CommandText = "<LDAP://" & strDN & ">;" & _
  "(&(objectclass=user)(objectcategory=person)(lastLogonTimestamp>=" & _
  DateToInt8(currentDate) & "));adspath,distinguishedname,sAMAccountName," & _
  "lastLogon,DisplayName,WhenCreated,userAccountControl;subtree"