("WinNT://" & domain) seems to be Windows NT Authetication user domain
("LDAP://" & domain) is LDAP server domain(Its an active directory used mostly internally for storing email addresses and logins etc..)
Main Topics
Browse All Topicshi, I just want to know what is the different between GetObject("WinNT://" & domain) and GetObject("LDAP://" & domain)?
Thanks.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
>you still can't retreive passwords
I can change paswords, add user, delete user etc , look here: http://dev.coadmin.dk/Reso
This simple question can have lots of explanation :o)
In active directory domains, there are more things can be done with the object returned with LDAP syntax than the one with WinNT. But you can't use the LDAP provider in NT domains nor can you use it to manage local computer accounts. In this case, use WinNT instead. LDAP provider supports hierarchical structure in which you can group objects into logical units, e.g. Organization Units or into Security units like Global Security Groups. On the other hand, WinNT supports a flat namespace and is blinds to the hierarchy of objects. There are also some incompability issues in attributes naming and usage. E.g. displayName, scriptPath and userAccountControl attributes are recognized only by LDAP. With WinNT, those attributes are called displayName, scriptPath and userAccountControl.
Some good reading.
http://msdn.microsoft.com/
http://msdn.microsoft.com/
From .NET Framework programming standpoint, you are always better off using the System.DirectoryServices API than the traditional COM GetObject syntax. The API can give all you need to explore your active directory forest.
http://msdn.microsoft.com/
Henry
Business Accounts
Answer for Membership
by: craskinPosted on 2006-03-20 at 10:47:39ID: 16238904
LDAP was built for email gateways to communicate with the domain. the GetObject WinNT is the back-door of sorts right into the domain. you still can't retreive passwords with it, but you can do basically the same things in both of them, just with different commands.