Directory Services

Using Alternate Credentials

[This documentation is preliminary and subject to change.]

This example uses DSDE to export employee data to a file from the fabrikam.com Active Directory. It performs the same search as the Exporting Active Directory Objects example, but specifies a set of alternate security credentials.

The following example runs from a command line. To open a command prompt window, click Start on the taskbar and then click Command Prompt.

C:\Documents and Settings\MyUserName> cd \program files\microsoft\dsde
C:\Program Files\Microsoft\DSDE> dsde /mode export 
									/baseDN CN=Users,DC=fabrikam,DC=com 
									/scope oneLevel 
									/protocol LDAP 
									/output employees.xml 
									/attributes name,sn,givenName,title,telephoneNumber,objectClass
									/cred jsmith sec#re8Tt~!

Note  For clarity, the command line is shown divided into several lines. Normally, it will be entered all on one line.

The command line options used in this example perform the following functions:

When using alternate credentials, use the /cred option followed by username and password. Using an asterisk (*) as the password on the command line will cause DSDE to prompt the user for the password. As you type the password, DSDE will not echo it to the console.

The following is a partial listing of the resulting employees.xml output file.

<batchResponse xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
			 xmlns:xsd="http://www.w3.org/2001/XMLSchema" 
			 xmlns="urn:oasis:names:tc:DSML:2:0:core">
  <searchResponse>
	<searchResultEntry dn="CN=Administrator,CN=Users,DC=fabrikam,DC=com">
	<attr name="objectClass">
		<value>top</value>
		<value>person</value>
		<value>organizationalPerson</value>
		<value>user</value>
	</attr>
	<attr name="name">
		<value>Administrator</value>
	</attr>
	</searchResultEntry>
	...  
	<searchResultEntry dn="CN=Jeff Smith,CN=Users,DC=fabrikam,DC=com">
	<attr name="objectClass">
		<value>top</value>
		<value>person</value>
		<value>organizationalPerson</value>
		<value>user</value>
	</attr>
	<attr name="sn">
		<value>Smith</value>
	</attr>
	<attr name="title">
		<value>Developer</value>
	</attr>
	<attr name="telephoneNumber">
		<value>(425) 555-0174</value>
	</attr> 		 
	<attr name="givenName">
		<value>Jeff</value>
	</attr>
	<attr name="name">
		<value>Jeff Smith</value>
	</attr>
	</searchResultEntry>
	...
	<searchResultDone>
	<resultCode code="0" descr="success" />
	</searchResultDone>
  </searchResponse>
</batchResponse>