Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Tip

When left empty, the default Query value is (|(&(objectclass=user)(objectcategory=person)(!(sAMAccountType=805306370)))(objectcategory=group)(objectCategory=container)(objectCategory=organizationalUnit)).

Example Queries

Tools

Tools to test your queries are dsquery, ADSIEdit, LDP, LDIFDE. For example using dsquery:

Code Block
langactionscript
dsquery * domainroot -filter "(&(objectCategory=user)(memberOf=CN=Staff,OU=Operations,DC=companyabc,DC=com))"

Examples

Find all users in the domain group All Staff

Tip
iconfalse

(&(objectCategory=user)(memberOf=CN=All Staff,OU=Operations,DC=companyabc,DC=com))

Find all users in the group All Staff, including those in nested groups. This uses the LDAP_MATCHING_RULE_IN_CHAIN matching rule OID.

Tip
iconfalse

(&(|(objectCategory=person))(memberof:1.2.840.113556.1.4.1941:=CN=All Staff,OU=Operations,DC=companyabc,DC=com))

Find all users and groups in All Staff, including those in nested groups.

Tip
iconfalse

(&(|(objectCategory=person)(objectCategory=group))(memberof:1.2.840.113556.1.4.1941:=CN=All Staff,OU=Operations,DC=companyabc,DC=com))

The default Arellia DSS query

Tip
iconfalse

(|(objectClass=computer)(objectClass=user)(objectClass=group)(objectClass=groupPolicyContainer))

Anchor
How To Use DSS
How To Use DSS