Retrieve a value from Active Directory via relevance

(imported topic written by Scarter77429)

We have in the past used a registry key to help categorize servers in to sectors for patch management. Given that the bit rate of the calling or writing application can alter the location of this information, we opted to move it in to Active Directory. I need to place servers in to computer groups based on this active directory value. Are there any suggestions or examples of how I could accomplish this?

(imported comment written by Tim.Rice)

One thing to keep in mind is that “by default” the client only refreshes AD information every 12 hours. This can be adjusted, but you need to be careful how frequently you allow the client to gather this information.

that said, there should already be an Active Directory Path property available (you may have to activate an Analysis for it). Other than the AD path, what “active directory value” are you interested in?

(imported comment written by Scarter77429)

We extended the AD schema and added a new computer attribute, so I would need to pull the value of that attribute and then use that value as a basis for populating the machine in to a computer group in TEM. I am more than fine using an analysis to gather that information, and they values do not change often so I am not as concerned about the 12 hour refresh. If you have any idea on how to retrieve the value of any computer attribute from AD, I should be able to take that and run with it. I appreciate your help.

(imported comment written by Tim.Rice)

I’ve never even tried to query a Custom Property in AD. From within IEM or outside it!

i don’t know if you can do it with WMI or if you will need to use a Command-Line utility.