Terrence is correct. You should use a combination of the domain and username to authenticate the account.
With AD, there are two methods: 1. userPrincipalName where CFLDAP username = "[EMAIL PROTECTED]" 2. NTDomain/userName where CFLDAP username = "NTDomain\username" I prefer to use method 1. -----Original Message----- From: Ryan, Terrence [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 18, 2006 11:58 AM To: CF-Talk Subject: RE: CFLDAP and AD Here's the query I use to do this. <cfldap action="query" name="authQuery" attributes="dn,memberof" filter="samAccountName=#arguments.username#" start="#LDAPStartRoot#" server="#variables.LDAPServerToUse#" username="[EMAIL PROTECTED]" password="#arguments.password#"/> Notice that you have to append the domain to the username to get it to work. I'm currently trying to get LDAPS working, so if you can do it, that would be preferable to what I currently have. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting, up-to-date ColdFusion information by your peers, delivered to your door four times a year. http://www.fusionauthority.com/quarterly Archive: http://www.houseoffusion.com/cf_lists/message.cfm/forumid:4/messageid:246941 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4

