From: Aldric Giacomoni <aldric@...>
Date: 2008-11-15T00:37:15+09:00
Subject: Re: Active Directory access - not just users, but computers too

Thank you to everyone - it's working like a charm!

Clifford Heath wrote:
> brabuhr@gmail.com wrote:
>> (first hit on google for "ldap active directory query examples")
>> Filter for computers:
>>     (objectCategory=computer)
> 
> You can do this query using either objectClass or objectCategory.
> objectClass is indexed but objectCategory is not indexed. If you
> query a large domain using the unindexed attribute, the query
> interrogates *every* object in the domain. Traps for the unwary ;-)
> 
> If you want just the users, no computers, you need:
> (&(objectCategory=person)(objectClass=user)(!objectClass=computer))
> 
> The rest of brabuhr's advice is good.
> 
> Clifford Heath.