Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Find out who users are and what department they are in

Does anyone know a way to script the database to pull the information.

1. Need to know who users are (we have 2 ways of logging in since we gained portions of other companies) Login IDs start with CHTR\ and Pxxxxxx

2. what department they are in (I know this involves active directory)

Find more posts tagged with

Accepted answers

All comments

mesverrum

Since no built in parts of orion keep tables of AD data you would have to build this outside of orion. Assuming I was doing something like this in powershell I would query the api to generate the basic data set of users I wanted to look up, I assume you'd be using something based on the swql query I gave you yesterday and probably filter it to accounts that are not orion local accounts. The get-swisdata command discussed here would allow you to do that

PowerShell · solarwinds/OrionSDK Wiki · GitHub

Then the second leg of the script would be querying AD departments from each user account left in the filtered version of the array. I found this powershell example for how to pull departments for a list of users (in our case we would by using the swql query as the source instead of a users.txt)

Get-Content C:\script\users.txt | Get-ADUser -Properties Department | Select-Object SamAccountName,Department

then stack that all up into a fresh array and dump it into a csv or whatever your preferred method of consumption is.

Hopefully that gives you some direction on how you would piece this kind of thing together.

d09h

Trying to understand why to investigate this from NPM. Seems to be a generic Windows Active Directory issue unless not all users are authenticated through Active Directory. Do you have local SolarWinds user accounts (defined in the application)?

Perhaps you can dump a SQL query on SolarWinds server to a CSV. And do the same for Active Directory. Use Excel to match on anything common.

Does Active Directory already tell you which department users are in?

mesverrum

There was a previous thread where he asked for help building a report auditing logins to orion, I'd assume this is the next phase of that inquiry. Who is in orion and where did they come from

rmurphy1313

I was tasked in trying to find a why of identifying the user with the department they were associated with so we could contact those departments and find out exactly what they were logging into solarwinds to see.

I know that I add users with an AD account but solar winds does not have the option for you select the department. I thought maybe someone else had run into this situation and would have ideas.

rmurphy1313

I was able to get a list from the DB of all our users but it wasn't enough "specific" information on each user.

d09h

I can kind of empathize. In previous employment AD group membership seemed to have been designed mainly for the monitoring tools visibility that each team needed. I didn't realize that early on, but eventually that seemed like the predominant reason for AD groups looking the way they did. Yet I had users who needed to access resources relevant to their team who were not being put in AD groups necessary to receive the right node filtering/ views.

You might find some benefit in looking at inetpub folder logs. That should tell you which users are accessing which pages.

I had a little success with selecting a few power users per team to give feedback on desired views and functionality. I would add that in some cases management over-rode that feedback (as in 'you most certainly will be looking at metric X or metric Y). I created test pages for feedback from these power users, and if there was approval from on high, those pages or their resources might just end up being the view their AD group saw by default.

rmurphy1313

I am not going to stress it. We are moving away from Solar winds to another monitoring platform (Not my idea).

Thank you everyone for all the comments/help. At least I am good with saying it can't be done within Solar Winds.