|
Just a bit of advice, are you sure the
attributes you are actually searching for are being replicated to the GC? Not
all attributes are replicated to the GC, if you would like to alter this , use
the Active Directory Schema MMC to view the attribueSchema, find the attributes
that you would like to search on the GC for, double click and check if "Replicate
this attribute to the Global Catalog" check box is checked. Be warned
though the more attributes you add the bigger the replication size that has to
take place * (* depending on the ver of Windows Server you running) I have code that will return the Global
Catalog server for either a forest or domain but it's in Vb.NET if you
want it just let me know. HTH LDAP programming? - Http://groups.yahoo.com/group/adsianddirectoryservices
Carlos Magalhaes ADSI MVP From: Creamer, Mark
[mailto:[EMAIL PROTECTED] <mc> -----Original Message----- I use
this vbscript to first bind to rootdse in the domain I am in. Then
use the results to build the global catalog string for my ado search. I dont
think it would be too difficult to convert to VB. ---------------------------------------------------------------------------------------------------- Set
objConnection = CreateObject("ADODB.Connection") Set
objCommand = CreateObject("ADODB.Command") objCommand.CommandText
= _ Set
objRecordSet = objCommand.Execute If
objRecordset.EOF Then objConnection.Close ---------------------------------------------------------------------------------------------------- Not
sure if this will help or not. But its the way I always ensure I hit a GC in
the domain Im in, no matter which domain Im in. From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Mulnick, Al Gil's post should provide
the information they need to do this. Did you catch that one the other
day? From: Creamer, Mark [mailto:[EMAIL PROTECTED] According to the
developers, the app is trying to do 2 things: 1.
Query a universal group membership for one
purpose 2.
Query a global group membership for a specific
domain for another purpose So, they tell me they can
specify the domain in their code. What they are looking for is how can they
find a server that meets both needs (DC and GC) in that specific domain. The
query would essentially say, "return a global catalog server in
my.domain.com" (as opposed to a GC in domain.com or myother.domain.com) They need to do this in
VB Thanks! <mc> -----Original
Message----- I think
it's a compiled application that is called by the web app. But I'll know more
tomorrow. We're supposed to meet to discuss it. I'll at least try to find out
what they're doing a little more clearly <mc> -----Original
Message----- Mark, can
you maybe post the code, as this will help us pinpoint the problem? If
you have multiple domains, it probably depends more on which domain the
universal group was created in than whether the DC is a GC or not. Tony From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Mulnick, Al IIRC
You're looking for the isGlobalCatalogReady attribute. If set to true,
then it's a global catalog. If not, then it's just a DC. Al From: Creamer, Mark [mailto:[EMAIL PROTECTED] Our
developers put together a web site on our intranet last year that allows
privileged users to add members of their staff to various groups. It works
great, except that now we are in native mode and are using some universal
groups. The app will work properly as long as it happens to hit a DC that is
also a GC. But from what they're telling me, it won't work for Universals if
the app searches for a DC and finds one that does not happen to be a GC. So what
I'm looking for, is whether there is a LDAP query component that they can use
in their app that will always only find DCs that are also GCs? Thanks, Mark Creamer Systems
Engineer Cintas
Corporation Honesty
and Integrity in Everything We Do
|
------------------------------------------------------------- This email and any files transmitted are confidential and intended solely for the use of the individual or entity to which they are addressed, whose privacy should be respected. Any views or opinions are solely those of the author and do not necessarily represent those of the Trencor Group, or any of its representatives, unless specifically stated.
Email transmission cannot be guaranteed to be secure, error free or without virus contamination. The sender therefore accepts no liability for any errors or omissions in the contents of this message, nor for any virus infection that might result from opening this message. Trencor is not responsible in the event of any third party interception of this email. If you have received this email in error please notify [EMAIL PROTECTED] For more information about Trencor, visit www.trencor.net <http://www.trencor.net>
