RE: [ActiveDir] LDAP filters

[joe]

To get anything for a particular domain, you would have to set special attributes on the objects that give you that info. There is no domain affinity in the RUS, it looks at every object in the forest equally.   Once you have some attribute you can key in on that is special for each domain for each domain, you can work from there.   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon Sent: Tuesday, September 27, 2005 11:34 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] LDAP filters Ok, I can start with that.  How would I get the contacts and groups for a particular domain in that same query?   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Tuesday, September 27, 2005 10:55 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] LDAP filters   OK, that query filter looks large and convoluted, i.e. a normal Exchange filter.   Personally, I would start out with something like   (|   (homemdb=store URL 1)   (homemdb=store URL 2)   (homemdb=store URL 3) )     That will list all mailboxes that live in the DBs specified. Contacts obviously do not have a homeMDB. Neither do groups.     As for the length of the query, just go in and pop the purportedSearch attribute directly. You can use ldp, admod, adsiedit, etc.       joe       From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon Sent: Tuesday, September 27, 2005 9:47 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] LDAP filters Well, what I need is to get a list of all the users and groups on three different mailbox stores.  When I use the ADUC snap-in to get the saved queries, it returns this:   (&(&(& (mailnickname=*) (| (&(objectCategory=person)(objectClass=user)(!(homeMDB=*))(!(msExchHomeServerName=*)))(&(objectCategory=person)(objectClass=user)(homeMDB=CN=New Jersey Mailbox Store,CN=East Coast Storage Group,CN=InformationStore,CN=SERVER1,CN=Servers,CN=SITE1,CN=Administrative Groups,CN=SOUTHERNWINE,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=domain,DC=com))(&(objectCategory=person)(objectClass=contact))(objectCategory=group) ))))   Problem is, this LDAP filter won’t fit in the Custom Search box in ESM, and this is only for one mailbox store.   -Devon       From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Monday, September 26, 2005 10:21 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] LDAP filters   Be very careful with this. The RUS doesn't actually use LDAP to execute that filter except for when you test it in ESM. I have seen perfectly good queries that work great in the test (because it actually submits the LDAP query to AD) and then the AL is built all wrong. It is usually around the NOT op. I know, for instance, that if you do (!attrb=value) versus (!(attrib=value)) it will almost certainly have issues.   What specifically do you want to do, I am sure someone can probably lay out a query for it.   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon Sent: Monday, September 26, 2005 4:51 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] LDAP filters Where can I fine more info on creating LDAP filters?  I’m trying to have Exchange 2003 Address List display users on multiple Mailbox Stores and Groups.  I have to do a custom LDAP search to accomplish this.   Devon Harding Windows Systems Engineer Southern Wine & Spirits - BSG 954-602-2469   __________________________________ This message and any attachments are solely for the intended recipient and may contain confidential or privileged information. If you are not the intended recipient, any disclosure, copying, use or distribution of the information included in the message and any attachments is prohibited. If you have received this communication in error, please notify us by reply e-mail and immediately and permanently delete this message and any attachments. Thank You.