Solved

How I do enumerate users of a group in a nested OU

Posted on 2010-09-16
2
955 Views
Last Modified: 2012-06-21
Goal: Setup Mailbox Mgr (Exchange 2003) to manage size of mailboxes using custom search/ldap query for members of a group where the group is in a nested OU

Issue: My ldap query below only returns users if the group is in a NON-nested OU -

(objectCategory=user)(memberOf=CN=GROUP,OU=OU,DC=DOMAIN,DC=com)

How can i alter my ldap query so it will return members of a security group in a nested OU so i dont have to change my AD layout - Below is how I have the layout

domain
   OU
       OU
          Group
0
Comment
Question by:SHAX
2 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 250 total points
ID: 33693223
The DN or your group should be something like  CN=group,OU=nestedOU1,OU=nestedOU2,DC=domain,DC=com.  I'll test later but it should pick it up
 
Thanks
Mike
0
 

Author Comment

by:SHAX
ID: 33700961
that worked - it appears the sub OU goes 1st and the parent OU is 2nd - you got me on the right track -

Thanks -
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains in simple steps how to renew expiring Exchange Server Internal Transport Certificate.
Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now