Tech Support > Operating Systems > Windows 2003 > Custom Address Lists / Creating an LDAP query in Active Directory Users and Computers
Custom Address Lists / Creating an LDAP query in Active Directory Users and Computers
Posted by Jon Paskett on February 23rd, 2004


Pardon the cross posting but I have scoured the Exchange and the Windows
newsgroups with no success.

Windows Server 2003 (and XP) has a folder called Saved Queries in Active
Directory Users and Computers.

I want to create custom queries in this container for use both in ADUC and
Exchange for custom Address lists.

There has GOT to be something out there that documents a few generic uses of
creating custom LDAP queries. Where can I find it?

From the simplest goal; I need to select all users in a certain security
group. To the more complicated use for Exchange; All users with Exchange
mailboxes in certain OU and all contact objects in a certain OU.

Please guide me in the right direction to help solve my requirements.

Thank you,

Jon


Posted by Chriss3 on February 23rd, 2004


You can use Filter Rules within a customized GAL in exchange to filter out
the scope by define a security group.

--
Regards,

Christoffer Andersson
No email replies please - reply in the newsgroup
If the information was help full, you can let me know at:
http://www.itsystem.se/employers.asp?ID=1

"Jon Paskett" <paskettj@email.NOSPAM.com> skrev i meddelandet
news:%23x$hEzi%23DHA.3812@TK2MSFTNGP09.phx.gbl...


Posted by Jon on February 23rd, 2004


I need to learn the rules for creating these LDAP queries. I know it's an
extremely powerful tool in the hands of the right person that knows how to
manipulate the Active Directory. Where can I gain more information?

TIA

Jon

"Chriss3" <noSpamHere@chrisse.se> wrote in message
news:uKHtQFk#DHA.1264@TK2MSFTNGP11.phx.gbl...


Posted by Chriss3 on February 23rd, 2004



XCLN: How to Use the Outlook LDAP Service to View the Global Address List:
http://support.microsoft.com/default...b;en-us;245830

XADM: How to Access the Directory Through LDAP When Search Control is Set
(Exchange)
http://support.microsoft.com/default...b;en-us;192306

Can any of theres links be to any help?

--
Regards,

Christoffer Andersson
No email replies please - reply in the newsgroup
If the information was help full, you can let me know at:
http://www.itsystem.se/employers.asp?ID=1

"Jon" <paskettj@email.com> skrev i meddelandet
news:eeXImdk%23DHA.2644@TK2MSFTNGP11.phx.gbl...


Posted by Torgeir Bakken (MVP) on February 23rd, 2004


Jon wrote:

Hi

VBScript programs to document and administer groups in Active Directory:

http://www.rlmueller.net/freecode3.htm


Programs to search Active Directory for objects meeting your criteria:

http://www.rlmueller.net/freecode6.htm



--
torgeir
Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of the 1328 page
Scripting Guide: http://www.microsoft.com/technet/scriptcenter



Posted by Richard Mueller [MVP] on February 24th, 2004


Hi,

I have some tips for using ADO to search AD at this link:

http://www.rlmueller.net/ADOSearchTips.htm

An LDAP filter for all users that are members of a group could look like
(watch line wrapping):

(&(objCategory=person)(objectClass=user)(memberOf= cn=TestGroup,ou=Sales,dc=M
yGroup,dc=com))

An LDAP filter for contacts would be:

(objectClass=contact)

However, there is no attribute of user objects that indicates the parent OU,
except perhaps the distinguishedName, and my attempts to filter with a
wildcard character (*) in distinguishedName failed. You can only filter on
an exact match of any distinguishedName. This includes values of the
memberOf attribute above. For example, you cannot shorten the filter to:

(&(objCategory=person)(objectClass=user)(memberOf= cn=TestGroup*))

If you are filtering in AD Users & Computers, you can apply any other
filters, then look in the OU of interest. Otherwise, I would suggest a
VBScript program using ADO. You can set the base of the search to the OU of
interest.

I believe the same issue arises if you search for all users with an Exchange
mailbox in an OU.

--
Richard
Microsoft MVP Scripting and ADSI
HilltopLab web site - http://www.rlmueller.net
--

"Torgeir Bakken (MVP)" <Torgeir.Bakken-spam@hydro.com> wrote in message
news:403A7302.4C166803@hydro.com...