How to Query Distinguished Name in AD

[water]

Yeah that does seem a little long, Ill do some more testing tomorrow

I must say thank you again for all your help. I wish I could repay the favor.

Bod

I'm glad I could help.

Actually it was a bug - or at least a misconfiguration. It's the only place in the UDF where a timeout is set. And unfortunately you got beaten by this limitation.

Such problems help me improve the UDF and - my personal gain - get a better understanding of Active Directory.

I'm sure you can repay the favor. If not to me then to someone else on the forum.

I'm really glad we could - together - solve this problem!

[water]

Yeah that does seem a little long, Ill do some more testing tomorrow

To improve performance I would suggest to change

(objectclass=user)

to

(&(objectcategory=person)(objectclass=user))

AD is indexed on some properties. One of them is ObjectCategory.

Another try would be to set the "Page Size" in function _AD_GetObjectsInOU to a higher value. Lets say:

$oAD_Command.Properties("Page Size") = 1000

I will have a look what M$ or google say how to enhance performance of LDAP queries. I will keep you informed.

Edited January 25, 2011 by water