Re: Any danger in using CSVDE in export mode?

Hello Alan,

You will not remove them from AD, if you mean this as you already saw. Maybe
you can make some performance test depending on the hardware of the server
where you connect to, to see if it slow down. So you can schedule this to
non-working hours.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello,
>
> Need some advice and reassurance please.
>
> I have to export, every day, some attributes of all the user accounts
> in our W2K3 AD. I'm using an ordinary user account, not one with admin
> rights to run the export job. I intend to schedule it.
>
> Is there any danger doing this?
>
> Already exported a couple of OUs as a test without any problems, now I
> want to export the entire AD. Sorry but I'm paranoid - and a contract
> worker.
>
> Thanks,
>
> - Alan.
>

No danger. This is done all the time.

--
Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--

"Alan" <> wrote in message
news:c2cc8a5a-3677-4031-bd3e-...
Hi Meinof,

The performane part doesn't worry me because we have 5-6 domain
controllers for about 4000 users.

Yes, I'm worried that I could somehow damage the objects that I export
or even AD itself. Is that possible using a non-admin account and
exporting only?

Thanks,

- Alan.

On Nov 15, 8:34 pm, Meinolf Weber [MVP-DS] <meiweb@(nospam)gmx.de>
wrote:
> Hello Alan,
>
> You will not remove them from AD, if you mean this as you already saw.
> Maybe
> you can make some performance test depending on the hardware of the server
> where you connect to, to see if it slow down. So you can schedule this to
> non-working hours.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > Hello,
>
> > Need some advice and reassurance please.
>
> > I have to export, every day, some attributes of all the user accounts
> > in our W2K3 AD. I'm using an ordinary user account, not one with admin
> > rights to run the export job. I intend to schedule it.
>
> > Is there any danger doing this?
>
> > Already exported a couple of OUs as a test without any problems, now I
> > want to export the entire AD. Sorry but I'm paranoid - and a contract
> > worker.
>
> > Thanks,
>
> > - Alan.

Alan,
assuming that you haven't modified default AD permissions granted to
Authenticated Users, you should be able to perform the export using a
non-privileged account - but as Richard and Meinolf have stated, no damage
is to be expected...

hth
Marcin

"Alan" <> wrote in message
news:c2cc8a5a-3677-4031-bd3e-...
Hi Meinof,

The performane part doesn't worry me because we have 5-6 domain
controllers for about 4000 users.

Yes, I'm worried that I could somehow damage the objects that I export
or even AD itself. Is that possible using a non-admin account and
exporting only?

Thanks,

- Alan.

On Nov 15, 8:34 pm, Meinolf Weber [MVP-DS] <meiweb@(nospam)gmx.de>
wrote:
> Hello Alan,
>
> You will not remove them from AD, if you mean this as you already saw.
> Maybe
> you can make some performance test depending on the hardware of the server
> where you connect to, to see if it slow down. So you can schedule this to
> non-working hours.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > Hello,
>
> > Need some advice and reassurance please.
>
> > I have to export, every day, some attributes of all the user accounts
> > in our W2K3 AD. I'm using an ordinary user account, not one with admin
> > rights to run the export job. I intend to schedule it.
>
> > Is there any danger doing this?
>
> > Already exported a couple of OUs as a test without any problems, now I
> > want to export the entire AD. Sorry but I'm paranoid - and a contract
> > worker.
>
> > Thanks,
>
> > - Alan.

There is little, if any, risk in doing this.

However, bear in mind that the limited user account may not be able to view
all user objects, depending on the security configuration of the
domain/forest. It is generally good practice to hide the Administrator and
privileged accounts in an OU with Deny Read access to normal users.

Dave

"Alan" <> wrote in message
news:c2cc8a5a-3677-4031-bd3e-...
> Hi Meinof,
>
> The performane part doesn't worry me because we have 5-6 domain
> controllers for about 4000 users.
>
> Yes, I'm worried that I could somehow damage the objects that I export
> or even AD itself. Is that possible using a non-admin account and
> exporting only?
>
> Thanks,
>
> - Alan.
>
> On Nov 15, 8:34 pm, Meinolf Weber [MVP-DS] <meiweb@(nospam)gmx.de>
> wrote:
>> Hello Alan,
>>
>> You will not remove them from AD, if you mean this as you already saw.
>> Maybe
>> you can make some performance test depending on the hardware of the
>> server
>> where you connect to, to see if it slow down. So you can schedule this to
>> non-working hours.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>>
>> > Hello,
>>
>> > Need some advice and reassurance please.
>>
>> > I have to export, every day, some attributes of all the user accounts
>> > in our W2K3 AD. I'm using an ordinary user account, not one with admin
>> > rights to run the export job. I intend to schedule it.
>>
>> > Is there any danger doing this?
>>
>> > Already exported a couple of OUs as a test without any problems, now I
>> > want to export the entire AD. Sorry but I'm paranoid - and a contract
>> > worker.
>>
>> > Thanks,
>>
>> > - Alan.
>