Active Directory Contact and OU Reports

    Contact and Organizational Unit (OU) Reports offer comprehensive visibility into Active Directory (AD) contacts and OUs , their creation, modification, Group Policy Object (GPO) linked OUs, and their other attributes.

    In this document, you will learn how to do the following:

    • Generate reports from multiple domains.
    • Apply filters for targeted results.
    • Refine results to include or exclude specific contacts and OUs.

    All Contacts

    This report provides the list of all contacts in a domain.

    How it works

    The report is generated by querying the domain for contact objects. The LDAP Query associated with this operation is (&(objectCategory=person)(objectClass=contact)).

    How to generate the report:

    1. Select the domain from the Select Domain drop-down. Select the OU by clicking on Add OUs link.
    2. Click Generate.

    Mail Enabled Contacts

    This report provides the list of mail enabled contact objects in the domain.

    How it works

    The report is generated by querying the domain for mail enabled contacts. The LDAP Query associated with this operation is (&(objectCategory=person)(objectClass=contact)(mailnickname=*)(targetAddress=*))

    How to generate the report:

    1. Select the domain from the Select Domain drop-down. Select the OU by clicking on Add OUs link.
    2. Click Generate.

    Recently Created Contacts

    This report lists all the contacts that were created over the specified time period.

    How it works

    The report is generated by querying the domain for contact based on their creation time. The LDAP query associated with this operation is (&(objectCategory=person)(objectClass=contact)(whenCreated>=%timeStamp%)(whenCreated<=%timeStamp%)).

    How to generate the report:

    1. Select the domain from the Select Domain drop-down. Select the OU by clicking on Add OUs link.
    2. Select the desired period from the options provided or enter a custom range under Select the desired time period.
    3. Click Generate.

    Recently Modified Contacts

    This report provides comprehensive information about contacts that were modified over the specified time period.

    How it works

    The report is generated by querying the domain for contact based on their modification time. The LDAP query associated with this operation is (&(objectCategory=person)(objectClass=contact)(whenChanged>=%timeStamp%)(whenChanged<=%timeStamp%)).

    How to generate the report:

    1. Select the domain from the Select Domain drop-down. Select the OU by clicking on Add OUs link.
    2. Select the desired period from the options provided or enter a custom range under Select the desired time period.
    3. Click Generate.

    Recently Deleted Contacts

    This report lists contacts that were deleted over the specified time period. It also shows the date and time at which they were created and deleted.

    How it works

    The report is generated by querying the domain for contact based on their deletion time. The LDAP query associated with this operation is (&(isDeleted=TRUE)(whenChanged>=%timeStamp%)(whenChanged<=%timeStamp%)).

    How to generate the report:

    1. Select the domain from the Select Domain drop-down. Select the OU by clicking on Add OUs link.
    2. Select the desired period from the options provided or enter a custom range under Select the desired time period.
    3. Click Generate.

    Note: Generated results can be filtered to display the memberOf attributes of contacts.

    All OUs

    This report provides a list of all the organizational units (OUs) present in the selected domain.

    How it works

    The report is generated by querying the LDAP server for attribute objectClass set to organizationalUnit i.e. objectClass=organizationalUnit.

    How to generate the report:

    1. Select the domain from the Select Domain drop-down.
    2. Click Generate.

    Empty OUs

    This report provides a list of all organizational units (OUs) in the selected domain that do not contain any objects.

    How it works

    The report is generated by querying the LDAP server for all OUs and check for child objects.

    How to generate the report:

    1. Select the domain from the Select Domain drop-down.
    2. Click Generate.

    Users-Only OUs

    This report provides a list of all organizational units (OUs) in the selected domain that contain only user objects.

    How it works

    The report is generated by querying the LDAP server for all OUs and check for user objects.

    How to generate the report:

    1. Select the domain from the Select Domain drop-down.
    2. Click Generate.

    Computers-Only OUs

    This report provides a list of all organizational units (OUs) in the selected domain that contain only computer objects.

    How it works

    The report is generated by querying the LDAP server for all OUs and check for computer objects.

    How to generate the report:

    1. Select the domain from the Select Domain drop-down.
    2. Click Generate.

    Recently Created OUs

    This report provides a list of all organizational units (OUs) in the selected domain that were created in past n days.

    How it works

    The report is generated by querying the LDAP server for the attribute createTimeStamp, which must be greater than or equal to the specified time i.e., createTimeStamp>=specifiedtime.

    How to generate the report:

    1. Select the domain from the Select Domain drop-down.
    2. Select the desired period from the options provided or enter a custom range under Select the desired time period.
    3. Click Generate.

    Recently Modified OUs

    This report provides the list of all organizational units (OUs) that are modified in past n days in a selected Domain.

    How it works

    The report is generated by querying the LDAP server for the attribute modifyTimeStamp, which must be greater than or equal to the specified time i.e. modifyTimeStamp>=specifiedtime.

    How to generate the report:

    1. Select the domain from the Select Domain drop-down.
    2. Select the desired period from the options provided or enter a custom range under Select the desired time period.
    3. Click Generate.

    GPO Linked OUs

    This report provides the list of all Group Policy Objects (GPOs) that are linked to an organizational unit (OU) in a selected Domain.

    How it works

    The report is generated by querying the LDAP server for attribute gPLink set equal to distinguished name of the GPO i.e. gPLink=*distinguished name of gpo*.

    How to generate the report:

    1. Select the domain from the Select Domain drop-down.
    2. Click Generate.

    GPO Inheritance Blocked OU

    This report provides a list of all the Organizational Units (OUs) that have Group Policy Objects (GPOs) blocked from inheritance.

    How it works

    The report is generated by querying the LDAP server for attribute gPOptions set to 1 i.e. gPOptions=1.

    How to generate the report:

    1. Select the domain from the Select Domain drop-down.
    2. Click Generate.

    Don't see what you're looking for?

    •  

      Visit our community

      Post your questions in the forum.

       
    •  

      Request additional resources

      Send us your requirements.

       
    •  

      Need implementation assistance?

      Try OnboardPro

       
    Copyright © © 2025, ZOHO Corporation.All Rights Reserved.