- Custom Address Lists / Creating an LDAP query in Active Directory Users and Computers
- Posted by Jon Paskett on February 23rd, 2004
Pardon the cross posting but I have scoured the Exchange and the Windows
newsgroups with no success.
Windows Server 2003 (and XP) has a folder called Saved Queries in Active
Directory Users and Computers.
I want to create custom queries in this container for use both in ADUC and
Exchange for custom Address lists.
There has GOT to be something out there that documents a few generic uses of
creating custom LDAP queries. Where can I find it?
From the simplest goal; I need to select all users in a certain security
group. To the more complicated use for Exchange; All users with Exchange
mailboxes in certain OU and all contact objects in a certain OU.
Please guide me in the right direction to help solve my requirements.
Thank you,
Jon
- Posted by Chriss3 on February 23rd, 2004
You can use Filter Rules within a customized GAL in exchange to filter out
the scope by define a security group.
--
Regards,
Christoffer Andersson
No email replies please - reply in the newsgroup
If the information was help full, you can let me know at:
http://www.itsystem.se/employers.asp?ID=1
"Jon Paskett" <paskettj@email.NOSPAM.com> skrev i meddelandet
news:%23x$hEzi%23DHA.3812@TK2MSFTNGP09.phx.gbl...
- Posted by Jon on February 23rd, 2004
I need to learn the rules for creating these LDAP queries. I know it's an
extremely powerful tool in the hands of the right person that knows how to
manipulate the Active Directory. Where can I gain more information?
TIA
Jon
"Chriss3" <noSpamHere@chrisse.se> wrote in message
news:uKHtQFk#DHA.1264@TK2MSFTNGP11.phx.gbl...
- Posted by Chriss3 on February 23rd, 2004
XCLN: How to Use the Outlook LDAP Service to View the Global Address List:
http://support.microsoft.com/default...b;en-us;245830
XADM: How to Access the Directory Through LDAP When Search Control is Set
(Exchange)
http://support.microsoft.com/default...b;en-us;192306
Can any of theres links be to any help?
--
Regards,
Christoffer Andersson
No email replies please - reply in the newsgroup
If the information was help full, you can let me know at:
http://www.itsystem.se/employers.asp?ID=1
"Jon" <paskettj@email.com> skrev i meddelandet
news:eeXImdk%23DHA.2644@TK2MSFTNGP11.phx.gbl...
- Posted by Torgeir Bakken (MVP) on February 23rd, 2004
Jon wrote:
Hi
VBScript programs to document and administer groups in Active Directory:
http://www.rlmueller.net/freecode3.htm
Programs to search Active Directory for objects meeting your criteria:
http://www.rlmueller.net/freecode6.htm
--
torgeir
Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of the 1328 page
Scripting Guide: http://www.microsoft.com/technet/scriptcenter
- Posted by Richard Mueller [MVP] on February 24th, 2004
Hi,
I have some tips for using ADO to search AD at this link:
http://www.rlmueller.net/ADOSearchTips.htm
An LDAP filter for all users that are members of a group could look like
(watch line wrapping):
(&(objCategory=person)(objectClass=user)(memberOf= cn=TestGroup,ou=Sales,dc=M
yGroup,dc=com))
An LDAP filter for contacts would be:
(objectClass=contact)
However, there is no attribute of user objects that indicates the parent OU,
except perhaps the distinguishedName, and my attempts to filter with a
wildcard character (*) in distinguishedName failed. You can only filter on
an exact match of any distinguishedName. This includes values of the
memberOf attribute above. For example, you cannot shorten the filter to:
(&(objCategory=person)(objectClass=user)(memberOf= cn=TestGroup*))
If you are filtering in AD Users & Computers, you can apply any other
filters, then look in the OU of interest. Otherwise, I would suggest a
VBScript program using ADO. You can set the base of the search to the OU of
interest.
I believe the same issue arises if you search for all users with an Exchange
mailbox in an OU.
--
Richard
Microsoft MVP Scripting and ADSI
HilltopLab web site - http://www.rlmueller.net
--
"Torgeir Bakken (MVP)" <Torgeir.Bakken-spam@hydro.com> wrote in message
news:403A7302.4C166803@hydro.com...