Chris May

dim iCounter

Set oRootDSE = GetObject("LDAP://RootDSE")
Set oDomain = GetObject("LDAP://" & oRootDSE.Get("DefaultNamingContext"))

msgbox("about to start")
Call EnumOUs(oDomain.ADsPath)
msgbox("done")
msgbox(iCounter)

Sub EnumOUs(sADsPath)

	Set oContainer = GetObject(sADsPath)
	oContainer.Filter = Array("OrganizationalUnit")
	For Each oOU in oContainer
		'WScript.Echo oOU.ADsPath
		EnumUsers(oOU.ADsPath)
		EnumOUs(oOU.ADsPath)
	Next

End Sub


Sub EnumUsers(sADsPath)

	Set oContainer = GetObject(sADsPath)
	oContainer.Filter = Array("User")
	For Each oADobject in oContainer

		If oADobject.Class = "user" Then
			oADobject.EnableRemoteControl = 2 '*** this is what we want CDM
			oADobject.SetInfo()
		'	WScript.Echo oADobject.sAMAccountName
		'	WScript.Echo oADobject.displayName
		'	WScript.Echo oADobject.Description
		'	WScript.Echo oADobject.employeeID
iCounter = iCounter + 1
		End If

	Next

End Sub