This step-by-step article describes how to enumerate attributes replicated in the Global catalog.
To obtain information about all of the objects in a Windows 2000 enterprise, query the global catalog. The global catalog consists of all objects in every domain in the enterprise. However, only selected attributes are replicated to the Global Catalog for each object.
To enumerate the attributes which are replicated to the Global Catalog, bind to the schema container and use the following LDAP filter:
(&(objectCategory=attributeSchema)(isMemberOfPartialAttributeSet=TRUE))
Query Active Directory
To query the active directory enumerating attributes that are replicated to the Global Catalog, use the Ldp.exe tool in the Microsoft Windows 2000 Resource Kit. To do this, follow these steps:
- Open the Ldp.exe tool.
- Click Options, click General, type 9999 in the Page Size box, and then click OK.
- Click Connection, and then click Bind.
- Note the output of LDP schemaNamingContext to determine the schema's Distinguished Name. The LDP schemaNamingContext uses the following context:
CN=Schema,CN=Configuration,DC=domainName,DC=com
- On the Browse menu, click Search.
- Paste the value of schemaNamingContext into the Base DN box.
- Paste the following filter into the Filter Box:
(&(objectCategory=attributeSchema)(isMemberOfPartialAttributeSet=TRUE))
- Under Scope, click Subtree.
- Click Options.
- Type the attributes you want, using the following syntax:
objectClass;name;cn;distinguishedName;
- On the Search Options box, click OK.
- Click Run to execute the query.
For additional information about LDAP, please see the following
articles in the Microsoft Knowledge Base:
224543
(http://support.microsoft.com/kb/224543/EN-US/
)
Using Ldp.exe to Find Data in the Active Directory
221606
(http://support.microsoft.com/kb/221606/EN-US/
)
Common LDAP RFCs
Back to the top
