dc=tools

Convert what the directory stores

Dates, flags, SIDs, GUIDs, logon hours and security descriptors are stored in forms that are hard to read and harder to search for. Each tool decodes them, and most work both ways and give you a filter you can use. Everything runs in your browser, so nothing you paste leaves your machine.

• RootDSE

  supportedControl OIDs, functional levels, naming contexts, site and role.

• Dates and times

  lastLogonTimestamp, pwdLastSet, accountExpires and GeneralizedTime, both ways.

• Password policy

  maxPwdAge and lockout durations, expiry dates and expiring-password filters.

• userAccountControl

  Flags to value and back, with 803 and 804 filters.

• Other flags

  groupType, sAMAccountType, encryption types, searchFlags, trusts and Exchange recipient types.

• logonHours

  A week grid for the 21-byte bitmap, in your time zone.

• objectSid

  S-1-5 form, hex, base64 and filter escapes.

• objectGUID

  String form, stored byte order, base64 and filters.

• Security descriptors

  SDDL or binary nTSecurityDescriptor, ACE by ACE in plain English.

• DNs

  DN, canonicalName, ADsPath and filter escaping.

• LDIF

  Base64 values decoded, values encoded, and unicodePwd records.

• dSHeuristics

  Each character position decoded, and valid strings built.

• Bind errors

  data 52e, 775, 773 and friends, with 4625 and 4771 codes.