Vista - Re: Comparison of two AD user queries

permalink · 04-08-2009

>I have to believe

Quote:

> that binding to the object with the DN is faster still, since there is no
> real searching involved.

Would fetching with the GUID be faster than searching on DN - or about
the same?

permalink · 04-08-2009

Quote:

>I believe all attributes (except operational ones) are loaded into the local property cache.

Which attributes are operational attributes?

permalink · 04-09-2009

<gimme_this_gimme_that@xxxxxx> wrote in message
news:c37803b3-5332-4020-a43f-5c2825b134f1@xxxxxx

Quote:

>

Quote:

>>I believe all attributes (except operational ones) are loaded into the
>>local property cache.

>
> Which attributes are operational attributes?

Operational attributes, also called constructed, are ones where the values
are not saved in active directory. Instead, they are calculated on request
from other attributes. There are about 36. For example: allowedAttributes,
canonicalName, createTimeStamp, modifyTimeStamp, primaryGroupToken,
tokenGroups.

To retrieve the value of an operational attribute use the GetInfoEx and
GetEx methods of the user object. For example:

Set objUser = GetObject("LDAP://cn=Jim Smith,ou=West,dc=MyDomain,dc=com")
objUser.GetInfoEx Array("canonicalName"), 0
strName = objUser.GetEx("canonicalName")
Wscript.Echo strName

The GetInfoEx method makes AD calculate the value. ADO also makes AD
calculate the value, so nothing extra is required when you use ADO.

--
Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--

04-08-2009	#1 (permalink)
gimme_this_gimme_that n/a posts	Re: Comparison of two AD user queries >I have to believe Quote: > that binding to the object with the DN is faster still, since there is no > real searching involved. Would fetching with the GUID be faster than searching on DN - or about the same?
My System Specs

04-08-2009	#2 (permalink)
gimme_this_gimme_that n/a posts	Re: Comparison of two AD user queries Quote: >I believe all attributes (except operational ones) are loaded into the local property cache. Which attributes are operational attributes?
My System Specs

04-09-2009	#3 (permalink)
Richard Mueller [MVP] n/a posts	Re: Comparison of two AD user queries <gimme_this_gimme_that@xxxxxx> wrote in message news:c37803b3-5332-4020-a43f-5c2825b134f1@xxxxxx Quote: > Quote: >>I believe all attributes (except operational ones) are loaded into the >>local property cache. > > Which attributes are operational attributes? Operational attributes, also called constructed, are ones where the values are not saved in active directory. Instead, they are calculated on request from other attributes. There are about 36. For example: allowedAttributes, canonicalName, createTimeStamp, modifyTimeStamp, primaryGroupToken, tokenGroups. To retrieve the value of an operational attribute use the GetInfoEx and GetEx methods of the user object. For example: Set objUser = GetObject("LDAP://cn=Jim Smith,ou=West,dc=MyDomain,dc=com") objUser.GetInfoEx Array("canonicalName"), 0 strName = objUser.GetEx("canonicalName") Wscript.Echo strName The GetInfoEx method makes AD calculate the value. ADO also makes AD calculate the value, so nothing extra is required when you use ADO. -- Richard Mueller MVP Directory Services Hilltop Lab - http://www.rlmueller.net --
My System Specs

Similar Threads
Thread	Forum
User Group Virtualization ESX/Hyper-V comparison and demonstration	Virtual Server
SQL Queries	PowerShell
can I do inner queries? or joins?	PowerShell
PowerShell User Guide - Comparison Operators - error?	PowerShell