>I have to believe

> that binding to the object with the DN is faster still, since there is no
> real searching involved.

Would fetching with the GUID be faster than searching on DN - or about
the same?

>I believe all attributes (except operational ones) are loaded into the local property cache.

Which attributes are operational attributes?

<gimme_this_gimme_that@xxxxxx> wrote in message
news:c37803b3-5332-4020-a43f-5c2825b134f1@xxxxxx

>

>>I believe all attributes (except operational ones) are loaded into the
>>local property cache.

>
> Which attributes are operational attributes?

Operational attributes, also called constructed, are ones where the values
are not saved in active directory. Instead, they are calculated on request
from other attributes. There are about 36. For example: allowedAttributes,
canonicalName, createTimeStamp, modifyTimeStamp, primaryGroupToken,
tokenGroups.

To retrieve the value of an operational attribute use the GetInfoEx and
GetEx methods of the user object. For example:

Set objUser = GetObject("LDAP://cn=Jim Smith,ou=West,dc=MyDomain,dc=com")
objUser.GetInfoEx Array("canonicalName"), 0
strName = objUser.GetEx("canonicalName")
Wscript.Echo strName

The GetInfoEx method makes AD calculate the value. ADO also makes AD
calculate the value, so nothing extra is required when you use ADO.

--
Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--