Active Directory in the Windows Server 2003 SDK

Posted August 12, 2003

Chat Date: July 16, 2003

Please note: Portions of this transcript have been edited for clarity

Chat Participants:

  • John, Editor on the Platform SDK team
  • Mark, Programmer/Writer
  • Diane, Windows Server 2003 SDK team
  • Janet, writer for the IIS SDK
  • Strohm Armstrong, Programmer/Writer specializing in Active Directory and ADSI programming documentation
  • Mark Caldwell, MVP Lead for Windows Server here in PSS

Moderator: MarkC (Microsoft)
Welcome to today's chat. Our topic today is Active directory in the Windows Server 2003 SDK.

Moderator: MarkC (Microsoft)
Mark Caldwell here and I am the MVP Lead for Windows Server here in PSS.

Welcome to today's chat. Our topic today is Active directory in the Windows Server 2003 SDK. We are pleased to welcome our experts for today. We would like to have them introduce themselves now.

Host: Strohm (Microsoft)
I am Strohm Armstrong, a Programmer/Writer specializing in Active Directory and ADSI programming documentation.

Host: Janet (Microsoft)
Hi, I'm Janet, a writer for the IIS SDK. I started as a tester on IIS, 6 years ago.

Host: Diane (Microsoft)
Hi! I'm Diane and I'm on the Windows Server 2003 SDK team. I'm the writer for the System.DirectoryServices SDK.

Host: John (Microsoft)
I'm an editor on the Platform SDK team. Thanks for joining us today!

Host: Mark (Microsoft)
Greetings! I am a Programmer/Writer and am responsible for maintaining the LDAP, DSML, and DSDE documentation in the Platform SDK.

Host: Diane (Microsoft)
A: Some of SDS is still under development. For the second question, take a look at the AD schema to find out the syntax type for your AD attributes.

Moderator: MarkC (Microsoft)
Q: Dumb question but I'm new here. I need some answers on Visio. Is there a chat room that I can go to? Help.

A: The public newsgroups would be your best bet for general Visio questions.

Host: Strohm (Microsoft)
Q: Every time when I try to use the Active Directory Manager my PC crashes. What can I do ?

A: Try reinstalling the admin pack from <https://download.microsoft.com/download/c/7/5/c750f1af-8940-44b6-b9eb-d74014e552cd/adminpak.exe>. You may also check out the KB article at <https://support.microsoft.com/default.aspx?scid=kb;EN-US;q314978> to see how to install individual tools.

Host: Diane (Microsoft)
Q: When I try to bind to a user's schema via LDAP://schema/user, and enumerate its mandatory and optional properties, I keep getting empty lists (without any entries) - why? Is this not supported in S.DS ?

A: Yes, this should work so it may be an authorization issue.

Host: Diane (Microsoft)
Q: When I try to bind to a user's schema via LDAP://schema/user, and enumerate its mandatory and optional properties, I keep getting empty lists (without any entries) - why?

A: Did you bind to the user and use the Properties method?

Host: Mark (Microsoft)
Q: What causes this error when doing a Bind connection to a domain controller? Unable to retrieve from repository(LDAP://bp1ghodc001.bp1.ad.bp.com). Error 0x8007052E: Logon failure: unknown user name or bad password. -- Extended Error --- LDAP Provider

A: That LDAP error code is listed as “Strong Authentication Is Required.” This would indicate that the bind request is being denied because the credentials being passed are insufficient. You may be trying to bind anonymously on a link that requires signing or sealing

Host: Diane (Microsoft)
Q: I then tried to get to the user's schema by examining "SchemaEntry" property.

A: Did you try to set up directorysearcher to search for mustcontain and maycontain

Moderator: MarkC (Microsoft)
Q: Max Vaughn from support suggested on the adsi newsgroup this week that there is a know memory leak in DirectorySearcher.FindOne and that FindAll should be used instead. Can anyone elaborate?

A: Joe, do you have a subject and post date regarding the memory leak?

Host: Strohm (Microsoft)
Q: Why isn't the <SID=xxxx> binding string syntax for AD/LDAP documented? (or is it?)

A: It is an oversight on my part. I will add this to my to do list for the next drop of the Platform SDK or MSDN documentation.

Host: Strohm (Microsoft)
Q: Are more formats supported to bind with SID and GUID strings in W2k3? Such as <SID=S-1-5-10>.

A: Both SID and GUID binding strings are currently supported. The SID string is poorly documented, but I will remedy that.

Host: Mark (Microsoft)
Q: Is there a way of Listing the machines in a domain from a command prompt ? I want to pipe it to a file.

A: You have to write a short VB script to do that. There is no built-in command line program that comes with Win2K3 that will run from the command l >> command line. There should be several example on TechNet that will do this for you.

Host: Strohm (Microsoft)
Q: Can u please help me with creating new user...which is under different domain name?

A: Manjit - Your question is beyond the scope of this chat and our capabilities. You will need to post this question to the Active Directory newsgroups or…contact Microsoft support services at https://support.microsoft.com.

Host: Diane (Microsoft)
Q: If you can't use FindOne, what should you do?

A: Use FindAll--it will find one or more objects

Host: Janet (Microsoft)
If anyone is interested in newsgroups for the IIS ADSI provider: ADSIANDDirectoryServices@yahoogroups.com. Also microsoft.public.platformsdk.adsi.iis-admin, microsoft.public.platformsdk.adsi, microsoft.public.adsi.general. Thanks for the great questions

Host: John (Microsoft)
Thanks for attending everyone. Watch for more chats from this team too.

Host: Strohm (Microsoft)
Thanks everyone. I have some great informaiton to add to the docs!!!

Host: Diane (Microsoft)
Thanks! See you in the communities!

For further information on this topic please visit the following:

Newsgroups: .

Website: Visit the Community Home Page for Windows Server

Top of Page