RE: [ActiveDir] Querying for all users

Mon, 28 Feb 2005 15:17:35 -0800

Lol

 

Dang!  Always forget about the objectcategory attrib….

 

Thanks guys!

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sakari Kouti
Sent: Monday, February 28, 2005 3:09 PM
To: [email protected]
Subject: RE: [ActiveDir] Querying for all users

 

Hi Alex,

 

The following filter might be right for you:

 

(&(objectcategory=person)(userAccountControl:1.2.840.113556.1.4.803:=512))

 

Yours, Sakari

 

PS. This gives the same result as Jorge's filter, that he just sent, but mine look cooler :-)

 

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alex Fontana
Sent: Tuesday, March 01, 2005 12:48 AM
To: [email protected]
Subject: [ActiveDir] Querying for all users

Is there any attribute that is unique to real user accounts only (mail enabled and non-mail enabled)?  We tried teaming up objectclass=user and givenname=*, but of course not all users have to have a given name.  Then tried teaming up the objectclass with useraccountcontrol=5*, then we found out about the 66048’s and 262656’s….damn them.  So, is there an ldap query that will give me all enabled active directory user accounts?  Most likely it’s so simple I would never have even thought about it.

 

TIA

Alex.

 

Reply via email to