Advertisement

07.09.2008 at 02:08AM PDT, ID: 23549476
[x]
Attachment Details

Exchange Address List - show both users and groups

Asked by drlandau in Exchange Email Server, Windows 2003 Server, Lightweight Directory Access Protocol (LDAP)

Tags: Microsoft, Exchange 2003, 2000 / 2003, LDAP query / Address list

We have a hosted environment where multiple customers run on the same Exchange 2003 server.
Each customer is assigned a customer number (fx. 1234) and a country-code (fx. dk), which combined is used as a suffix in the userPrincipalName (username@1234.dk). Similarily the names of groups are also appended with the suffix (groupname@1234.dk).

Each customer has it's own Global Address List that displays Exchange users with userPrincipalName=*1234.dk, so their Exchange Address list only displays the users from the particular customer (each GAL is assigned special permissions).

We can also create a seperate Address List for each customer, that shows the groups which has 1234.dk in the name (cn=*1234.dk).

But we would like to be able to construct an address list that shows BOTH users with userPrincipalName=*1234.dk AND groups with cn=*1234.dk on the SAME address list.

Is this possible?

This custom query will show all Exchange users from business 1234.dk:
(&(&(&(& (mailnickname=*) (| (&(objectCategory=person)(objectClass=user)(|(homeMDB=*)(msExchHomeServerName=*)))(objectCategory=group) )))(objectCategory=user)(userPrincipalName=*1234.dk)))

This (custom query will show all Exchange groups from business 1234.dk:
(&(&(&(& (mailnickname=*) (| (&(objectCategory=person)(objectClass=user)(|(homeMDB=*)(msExchHomeServerName=*)))(objectCategory=group) )))(objectCategory=group)(cn=*1234.dk)))

But how can these be combined?

These shortened LDAP queries also work:
(userPrincipalName=*1234.dk)
...and...
(cn=*1234.dk)

But can they be combined?

This DOESN'T work:

(userPrincipalName=*1234.dk)|(cn=*1234.dk)
(userPrincipalName=*1234.dk)(cn=*1234.dk)
(userPrincipalName=*1234.dk)&(cn=*1234.dk)

Any help on combining user and group LDAP queries will be hughly appreciated!!!

Thanks,
NicolajStart Free Trial
[+][-]07.09.2008 at 02:51AM PDT, ID: 21961835

View this solution now by starting your 7-day free trial. Setting up your free trial is quick, easy, and secure. We will return you to this solution, unlocked, when you're done.

 

About this solution

Zones: Exchange Email Server, Windows 2003 Server, Lightweight Directory Access Protocol (LDAP)
Tags: Microsoft, Exchange 2003, 2000 / 2003, LDAP query / Address list
Sign Up Now!
Solution Provided By: uid94130
Participating Experts: 1
Solution Grade: A
 
 
[+][-]07.09.2008 at 04:11AM PDT, ID: 21962265

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
 
Loading Advertisement...
20080716-EE-VQP-32 / EE_QW_2_20070628