User Properties in Computer
Windows Server Forum Index Windows Server
Server discussion on Windows platform.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web winserverhelp.com
User Properties in Computer

 
Post new topic   Reply to topic    Windows Server Forum Index -> Active Directory
Author Message
GC Postmaster
Guest
Posted: Wed Nov 09, 2005 5:50 pm    Post subject: User Properties in Computer Reply with quote
We are building a search tool for AD and the best way we were told to filter
to just users was to filter based on "objectClass=User". However, we are
getting computers returned with the results.

We looked at our computers in ADSI and they have objectClass=Person as well
as User and Computer.

We looked at our schema and the computer class has all of the user
properties in it as well.

Is this normal? Myself and the current systems manager inherited this
environment when we started to work here. No one here knows why this is this
way.

If this is normal, what is the best way to filter out just Users or just
Computers?

If it's not normal, does anyone have a suggestion for how to remedy this? It
seems that all computers objects that are created when a computer joins the
domain, are getting User properties as well.

Thanks!
Back to top
Krishna
Guest
Posted: Wed Nov 09, 2005 5:50 pm    Post subject: RE: User Properties in Computer Reply with quote
ObjectCategory will differ for computer and user objects.

Computer objects have user accounts in domain, which they use to
authenticate to the domain. So it is normal to have those properties in the
computer objectt.

K

"GC Postmaster" wrote:

Quote:
We are building a search tool for AD and the best way we were told to filter
to just users was to filter based on "objectClass=User". However, we are
getting computers returned with the results.

We looked at our computers in ADSI and they have objectClass=Person as well
as User and Computer.

We looked at our schema and the computer class has all of the user
properties in it as well.

Is this normal? Myself and the current systems manager inherited this
environment when we started to work here. No one here knows why this is this
way.

If this is normal, what is the best way to filter out just Users or just
Computers?

If it's not normal, does anyone have a suggestion for how to remedy this? It
seems that all computers objects that are created when a computer joins the
domain, are getting User properties as well.

Thanks!


Back to top
Paul Williams [MVP]
Guest
Posted: Thu Nov 10, 2005 1:51 am    Post subject: Re: User Properties in Computer Reply with quote
Computers are subclasses of the user class, so they share the same class and
attributes.

Use (&(objectClass=user)(objectCategory=person)) to just pull users and
contacts.

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net
Back to top
Joe Richards [MVP]
Guest
Posted: Thu Nov 10, 2005 1:51 am    Post subject: Re: User Properties in Computer Reply with quote
Actually (&(objectClass=user)(objectCategory=person)) will pull users

(&(objectClass=contact)(objectCategory=person)) will pull contacts.

objectcategory=person will pull users and contacts.



Paul Williams [MVP] wrote:
Quote:
Computers are subclasses of the user class, so they share the same class and
attributes.

Use (&(objectClass=user)(objectCategory=person)) to just pull users and
contacts.
Back to top
Paul Williams [MVP]
Guest
Posted: Thu Nov 10, 2005 9:51 am    Post subject: Re: User Properties in Computer Reply with quote
Whoops. :-(

Thanks for the correction!

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net
Back to top
GC Postmaster
Guest
Posted: Thu Nov 10, 2005 9:50 pm    Post subject: Re: User Properties in Computer Reply with quote
Thanks ya'll!


"GC Postmaster" <email_accounts@gordon.edu> wrote in message
news:uZ8hGGU5FHA.1032@TK2MSFTNGP11.phx.gbl...
Quote:
We are building a search tool for AD and the best way we were told to
filter to just users was to filter based on "objectClass=User". However,
we are getting computers returned with the results.

We looked at our computers in ADSI and they have objectClass=Person as
well as User and Computer.

We looked at our schema and the computer class has all of the user
properties in it as well.

Is this normal? Myself and the current systems manager inherited this
environment when we started to work here. No one here knows why this is
this way.

If this is normal, what is the best way to filter out just Users or just
Computers?

If it's not normal, does anyone have a suggestion for how to remedy this?
It seems that all computers objects that are created when a computer joins
the domain, are getting User properties as well.

Thanks!
Back to top
Joe Richards [MVP]
Guest
Posted: Fri Nov 11, 2005 1:50 am    Post subject: Re: User Properties in Computer Reply with quote
No problem, makes me feel useful. :)


Paul Williams [MVP] wrote:
Quote:
Whoops. :-(

Thanks for the correction!
Back to top
Paul Williams [MVP]
Guest
Posted: Sun Nov 13, 2005 1:50 pm    Post subject: Re: User Properties in Computer Reply with quote
Good. Me too then ;-)

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net
Back to top
 
Post new topic   Reply to topic    Windows Server Forum Index -> Active Directory All times are GMT
Page 1 of 1

 
 You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




New Topics Powered by phpBB