One other thing, change your START attribute to the following format: start="dc=domain, dc=com"
(Replace "domain" with the correct domain for this company.) For example, ours would be: start="dc=evansville, dc=edu" As I mentioned in another message, all users, by default, can query the Active Directory. This could change if the domain admins changed this functionality. If this still doesn't work, change the start to an existing OU: start="ou=users, dc=domain, dc=com" and see if you can query from that point. It may be possible that your user account doesn't have access to the root of the directory. M!ke ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Discover CFTicket - The leading ColdFusion Help Desk and Trouble Ticket application http://www.houseoffusion.com/banners/view.cfm?bannerid=48 Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192123 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
