You can also get AD web services which will get anything you need from AD and can go to whatever domain you want.
One is available at www.qdabra.com
Main Topics
Browse All TopicsI am developing a form where I would like to read the members of a Active Directory group. I had some success using some code-behind on the form. The code performs an LDAP query for the group where I later extract the users from the group and work with it as needed.
This solution worked fine in my development environment, but fails in my production environment. My dev environment is in the same domain as the AD domain, but production is a special case. The production server is on the same domain, but the published sharepoint site is referenced with a different domain name.
AD domain: ABCD.lan
DEV Server: dev.ABCD.lan
PROD Server: prod.ABCD.lan
PROD Website: prod.EFGH.com
Is there a way I can perform a cross domain LDAP query? Or perhaps there is a better way to get the AD group membership I am looking for?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
You can also get AD web services which will get anything you need from AD and can go to whatever domain you want.
One is available at www.qdabra.com
Thank you for the suggestions. If I had it to do over again I would have made the site domain the same as the server domain to avoid this problem. I will try the qdabra trial solution but I don't know if I'll be able to purchase the full version. I may end up making a Sharepoint group and using the webservice instead of trying to call to AD. It isn't exactly what I was hoping for, but at least it works.
Business Accounts
Answer for Membership
by: StevenmuPosted on 2009-02-07 at 12:38:18ID: 23580088
I'm not sure if this will work but in the Forms Server options (in Sharepoint Central Administration on the Application tab) there is an option for allow cross-domain queries. I think you need to also deploy the form as an administrator approved template for this to be allowed (which I presume you're already doing if you're using managed code).
il/blogs/i taysk/arch ive/2007/0 4/05/ InfoP ath-_2D00_ -Get-the-c urrent-use r-without- writing- co de.aspx
A better option may be to use the UserProfileService web service, the link below details how to use it to return info on the current user but it performs other tasks too, maybe it could suit your needs.
http://blogs.microsoft.co.