Active Directory Filtering

[Miked811]

Hi,

I have an Active Directory that have an OU structure below.

Head Office
IT
Accounting
Finance
etc...

Where Head Office is the Root OU and the ones below are sub OUs.

This code works fine when I run it:

strBase = "<LDAP://ou=Head Office,dc=kuplax,dc=com>"

strFilter = "(&(objectCategory=person)(objectClass=user))"
    
strAttributes = "sAMAccountName,cn,userPrincipalName,"

strQuery = strBase & ";" & strFilter & ";" & strAttributes & ";subtree"
adoCommand.CommandText = strQuery
adoCommand.Properties("Page Size") = 100
adoCommand.Properties("Timeout") = 30
adoCommand.Properties("Cache Results") = False

Set adoRecordset = adoCommand.Execute

But it returns all the Users in all the sub OUs. What I only want is to return Users from certain sub OUs, e.g. IT.

How can I further filter the sub OUs, please help.

Thanks

Mike

 

[tsuji]

>How can I further filter the sub OUs, please help.
You've to bind to the ou directly like this (ou: IT, for instance)
[tt]strBase = "<LDAP://[blue]ou=IT,[/blue]ou=Head Office,dc=kuplax,dc=com>"[/tt]
rather than restricting further the filter. ou is not exposed to the object as an attribute, hence, there is no way to narrow down the filter to the specific sub ou.

 

[Miked811]

Thank you very much tsuji for your response. In Addition, I found a resource for this post:

http://www.microsoft.com/technet/scriptcenter/resources/qanda/sept04/hey0917.mspx

Again my thanks to you and have a Merry Christmas and a Happy New Year everyone....

By the way, it works now the way I want it to be.

Mike