RE: [ActiveDir] Querying for all users

[Sakari Kouti]

Hi Alex,   The following filter might be right for you:   (&(objectcategory=person)(userAccountControl:1.2.840.113556.1.4.803:=512))   Yours, Sakari   PS. This gives the same result as Jorge's filter, that he just sent, but mine look cooler :-)   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alex Fontana Sent: Tuesday, March 01, 2005 12:48 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Querying for all users Is there any attribute that is unique to real user accounts only (mail enabled and non-mail enabled)?  We tried teaming up objectclass=user and givenname=*, but of course not all users have to have a given name.  Then tried teaming up the objectclass with useraccountcontrol=5*, then we found out about the 66048�s and 262656�s�.damn them.  So, is there an ldap query that will give me all enabled active directory user accounts?  Most likely it�s so simple I would never have even thought about it.   TIA Alex.