Its binding to a DC in the domain of the current security context, probably something in the root domain? So you're getting the domainDNS object from a replica of the root domain NC, and there are no subordinate objects in that NC. If you specify the DN of the object you *really* want to bind to, the LDAP client will chase referrals to an appropriate DC.
Use "LDAP://child.domain.com/DC=Child,DC=Domain,DC=com"; to bind to the domainDNS object on a DC in that domain. -gil -----Original Message----- From: Salandra, Justin A. [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 21, 2003 1:01 PM To: ActiveDir (E-mail) Subject: [ActiveDir] Child Domains Programming Me and my web administrator who is the programmer around here needs your held. If I specify the child domain: set ADS = getObject("LDAP://DC=Child,DC=Domain,DC=Com";) It only returns the object as domainDNS and will not list any child objects.. If I bind to the child using the Global Catalog: set ADS = getObject("GC://DC=Child,DC=Domain,DC=Com") I can read any properties or child objects, but this is read-only. So how do I bind to a child DC to modify users? Justin A. Salandra, MCSE Senior Network Engineer Catholic Healthcare System 914.681.8117 office 646.483.3325 cell [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
