Re: LDAP Query

Opposite to most people would think at first thought, group membership
enumerating is quite a difficult thing. Most scripts on the Net are not
completed.

A compete membership should include
- "normal" domain group
- primary group
- machine local group

I didn't use it myself, but the following one seems to be a good one.

http://www.rlmueller.net/Programs/EnumGroup.txt

Jorge Silva wrote:
Hi
What already did you tried? Can you post here?

--
I hope that the information above helps you

Good Luck
Jorge Silva
MCSA
Systems Administrator
"Dan" <Dan@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:D4D378E2-3ED7-4FF1-9BE2-20D0A272F500@xxxxxxxxxxxxxxxx
I am trying to query my company's active directory using LDAP. I need to
find
what groups a specific employee is in. I can't get the query string to
work,
even typing it in my Explorer address. Our structure is set up as:
domain -
Accounts - Employees. Can anyone help me with this?

.

Relevant Pages

  • Re: VB .Net Security Question
    ... also got better results once I ensured that it was a WindowsPrincipal object ... serious lag between the time that I make a change in the group membership, ... > is a member of that domain group? ... I can make this code work just ...
    (microsoft.public.dotnet.security)
  • Re: VB .Net Security Question
    ... also got better results once I ensured that it was a WindowsPrincipal object ... serious lag between the time that I make a change in the group membership, ... > is a member of that domain group? ... I can make this code work just ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Best practice to disable former employee
    ... I guess it depends on if you need access to mail sent to the employee after ... If you're just trying to prevent NDRs, create a mail enabled distribution ... Remove the smtp address from the employes AD object, ... > Because of email group membership, we are getting the following message ...
    (microsoft.public.exchange.admin)
  • Re: WMI - query AD group membership
    ... What does "domain group membership for the client" mean? ... Do you mean group membership of the user who is logged into box x or what? ... If you're on AD, you should be able to use ADSI, if you're not, the ... is it possible to use Win32 classes to retrieve domain group membership for the client? ...
    (microsoft.public.win32.programmer.wmi)
  • Re: troubles adding domain group as database role member
    ... question - does the domain group show up as "via group membership" or as ... "Permit" in the Database Access column. ... the database to the domain group using sp_grantdbaccess before then using ... Jasper Smith (SQL Server MVP) ...
    (microsoft.public.sqlserver.security)