Jeremy Simmons: The Blog

Two things when query-ing AD.

1. Don't specify a begging or mid-string wildcard, use the ending wildcard. (You can do this if you set up indexes differently than the out-of-box install)

   Bad

   (cn=*foo)
   (cn=foo*bar)
   

   Good

   (cn=foo*)

2. A failrly un-documented feature, but very affective (because it's indexed), for finding user accounts is to specify this in the filter.

   (&(sAMAccountType=805306368)(!(objectClass=inetOrgPerson)))

   as a substitute for this

   (&(objectCategory=person)(objectClass=user))

My friend Jon Gillin is teaching me how to play the guitar.

I'll post more about what I learned later today.

I'm not saying the guys at Microsoft, Hotmail or Live are sleeping on the job here. Far from it in fact. These people run some of the most available websites I've ever seen.

Take a break guys, you deserve it.