RE: [ActiveDir] LDAP filters

[Brian Desmond]

Well you can always just paste it into the purportedSearch attribute on the address list in ADSI. Keep in mind that as Joe says, Exchange/RUS does its own filter processing, and it does a crap job of it.   (&             (&                         (mail=*)                         (|                                     (&(objectCategory=person)(objectClass=contact)                                     (&(objectCategory=group)(objectClass=group)                                     (&(objectCategory=person)(objectClass=user)(|                                                                                                                         (homeMDB=CN=New Jersey, CN=East Cost, cn=etc)                                                                                                                         (homeMDB=CN=East Jesus, CN=USA, cn=etc)                                                                                                                         (homeMDB=CN=Tuvalu, CN=Far Away, cn=etc)                                                                                                             )                                     )                         )             ) )   That should work. It will get you any group or contact with an email, and users in New Jersey, East Jesus, and Tuvalu.           Thanks, Brian Desmond [EMAIL PROTECTED]   c - 312.731.3132     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon Sent: Tuesday, September 27, 2005 9:47 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] LDAP filters   Well, what I need is to get a list of all the users and groups on three different mailbox stores.  When I use the ADUC snap-in to get the saved queries, it returns this:   (&(&(& (mailnickname=*) (| (&(objectCategory=person)(objectClass=user)(!(homeMDB=*))(!(msExchHomeServerName=*)))(&(objectCategory=person)(objectClass=user)(homeMDB=CN=New Jersey Mailbox Store,CN=East Coast Storage Group,CN=InformationStore,CN=SERVER1,CN=Servers,CN=SITE1,CN=Administrative Groups,CN=SOUTHERNWINE,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=domain,DC=com))(&(objectCategory=person)(objectClass=contact))(objectCategory=group) ))))   Problem is, this LDAP filter won’t fit in the Custom Search box in ESM, and this is only for one mailbox store.   -Devon       From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Monday, September 26, 2005 10:21 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] LDAP filters   Be very careful with this. The RUS doesn't actually use LDAP to execute that filter except for when you test it in ESM. I have seen perfectly good queries that work great in the test (because it actually submits the LDAP query to AD) and then the AL is built all wrong. It is usually around the NOT op. I know, for instance, that if you do (!attrb=value) versus (!(attrib=value)) it will almost certainly have issues.   What specifically do you want to do, I am sure someone can probably lay out a query for it.   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon Sent: Monday, September 26, 2005 4:51 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] LDAP filters Where can I fine more info on creating LDAP filters?  I’m trying to have Exchange 2003 Address List display users on multiple Mailbox Stores and Groups.  I have to do a custom LDAP search to accomplish this.   Devon Harding Windows Systems Engineer Southern Wine & Spirits - BSG 954-602-2469   __________________________________ This message and any attachments are solely for the intended recipient and may contain confidential or privileged information. If you are not the intended recipient, any disclosure, copying, use or distribution of the information included in the message and any attachments is prohibited. If you have received this communication in error, please notify us by reply e-mail and immediately and permanently delete this message and any attachments. Thank You.