> Does this mean that the string it wants looks like LDAP://company.local,dc=co
It would be:
LDAP://company.local/DC=co
It splits into:
<Port>://<Server>/<LDAPBase>
Server in this case is "company.local", if you run "nslookup company.local" you should get back the IP address for each of your Domain Controllers which is why it works quite happily.
In their example they start their search / synchronisation at an Organisational Unit called USA (and everything beneath that). If you wanted to start yours at an OU called All Offices you would write it as:
LDAP://company.local/OU=Al
All it does it help you limit the search, preventing the inclusion of unwanted users / details on the system (typically to avoid the inclusion of all the default accounts, Administrator, Guest, etc, etc).
Chris
Main Topics
Browse All Topics





by: jwarnkenPosted on 2009-04-05 at 20:53:47ID: 24074269
This is something that depends on the structure of you domain.
I would use the rootDSE and "defaultNamingContext" from this example script to make your script dynamic enough to run in any domain
Select allOpen in new window