<gimme_this_gimme_that@xxxxxx> wrote in message
>>I believe all attributes (except operational ones) are loaded into the
>>local property cache.
> Which attributes are operational attributes?
Operational attributes, also called constructed, are ones where the values
are not saved in active directory. Instead, they are calculated on request
from other attributes. There are about 36. For example: allowedAttributes,
canonicalName, createTimeStamp, modifyTimeStamp, primaryGroupToken,
To retrieve the value of an operational attribute use the GetInfoEx and
GetEx methods of the user object. For example:
Set objUser = GetObject("LDAP://cn=Jim Smith,ou=West,dc=MyDomain,dc=com")
objUser.GetInfoEx Array("canonicalName"), 0
strName = objUser.GetEx("canonicalName")
The GetInfoEx method makes AD calculate the value. ADO also makes AD
calculate the value, so nothing extra is required when you use ADO.
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net