RE: [ActiveDir] Simple LDAP Query

[joe]

I am not sure I follow but then, hey, I'm not an Exchange person. :o)   Your issue sounds to be with the RUS though and not the ALs. If this is something you guys are having pain with and it is very important, I, personally, would probably sit down in a lab and try to work up my own code (or use MIIS) to do the provisioning of the info that the RUS is setting and get rid of the RUS. Keep in mind, this is a person saying this who doesn't know Exchange, just looking at what should be logically possible to do since the RUS seems to be one of the bastard stepchild components in terms of how it is functioning.   In your testing you need to make sure everything else is happening as expected when the RUS is turned off. Do not assume that MS has everything documented in that KB article that it may be doing. I have found the Exchange documentation to be very misleading at times and wholly missing at others. It is, however, amazing how much you can learn throwing a network monitor on a machine though and watching what it is doing...     joe   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael B. Smith Sent: Wednesday, May 05, 2004 12:04 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Simple LDAP Query 1. Wasn't arguing.... just hoping for other options.  :-)   2. I didn't know it wasn't really doing queries.   3. Righto   4. Righto.   Does this evidence indicate that a single a/l server might be a better plan?   Thanks, M From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Wednesday, May 05, 2004 11:39 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Simple LDAP Query Resend...       Couple of things...   1. Listen to Brian   2. The RUS is what builds those lists and isn't really doing LDAP queries to build them. Turn up logging and turn on netmon and watch what happens as they go through the objects, it is rather startling to watch.   3. You can not set search bases because queries aren't being used. The objects being compared are coming from the config container and all over the default container. Again, watch the logging and netmon. Very simple to see what is happening when watching it. You will note thought that when you test the "query" in the ESM, it will actually do an LDAP query against AD, again, look at netmon.   4. You have to have some attribute (or group of attributes) that you can key on that will uniquely "place" that object in an AL.        joe   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Desmond Sent: Tuesday, May 04, 2004 9:56 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Simple LDAP Query You can group contacts.   I spent tens of hours with PSS on this - no dice.   ==Brian -----Original Message----- From: Michael B. Smith [mailto:[EMAIL PROTECTED] Sent: Tue 5/4/2004 8:38 PM To: [EMAIL PROTECTED] Cc: Subject: RE: [ActiveDir] Simple LDAP Query The problem is with contacts and public folders. I already do the crawl. But contacts within the OU’s are a particular pain.   Perhaps I’m wrong, but I figure that there HAS to be a way. :-P   (Hope springs eternal…)   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Desmond Sent: Tuesday, May 04, 2004 8:33 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Simple LDAP Query   You can't do that with exchg. Get a security group with everybody in the OU, and search for (memberOf=DNToGroup). I know it's a pain - I do it. If the OUs are constantly going to change, write an agent to crawl them every night and update the groups.   --Brian Desmond -----Original Message----- From: Michael B. Smith [mailto:[EMAIL PROTECTED] Sent: Tue 5/4/2004 7:27 PM To: [EMAIL PROTECTED] Cc: Subject: RE: [ActiveDir] Simple LDAP Query Unfortunately, I don’t have the luxury of specifying my search base. I need a query that I can, specifically, place into an “All Address Lists” object in Exchange System Manager. So effectively I’m limited to a search base of the domain.   But thanks for your response.   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ulf B. Simon-Weidner Sent: Tuesday, May 04, 2004 6:00 PM To: [EMAIL PROTECTED] Subject: AW: [ActiveDir] Simple LDAP Query   Hi Michael,   just define it in the search base, e.g. LDAP://ou=myou,dc=mydomain,dc=com. You define usually searchbase, filter, attribues and scope - and searchbase does not need to be the domain, it can be any LDAP Path.   HTH, Ulf   Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Michael B. Smith Gesendet: Dienstag, 4. Mai 2004 23:38 An: [EMAIL PROTECTED] Betreff: [ActiveDir] Simple LDAP Query I'm obviously missing something simple...   How do I construct a query to return all the objects in a particular OU?   (To be specific, I want to return everything in an OU that is mail-enabled -- but I can do the rest given the syntax to search only a particular OU.)   Thanks