From: Clifford Heath <no@...>
Date: 2008-11-14T18:07:08+09:00
Subject: Re: Active Directory access - not just users, but computers too

brabuhr@gmail.com wrote:
> (first hit on google for "ldap active directory query examples")
> Filter for computers:
>     (objectCategory=computer)

You can do this query using either objectClass or objectCategory.
objectClass is indexed but objectCategory is not indexed. If you
query a large domain using the unindexed attribute, the query
interrogates *every* object in the domain. Traps for the unwary ;-)

If you want just the users, no computers, you need:
(&(objectCategory=person)(objectClass=user)(!objectClass=computer))

The rest of brabuhr's advice is good.

Clifford Heath.