Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have written some code to fetch user information from an Active Directory Server. Suppose the Active Directory Server has nodes, each of which is another Active Directory Installation in a different geographic location. Eg: one AD server in US and another in Australia with a root AD Server in US with the former two as nodes.

Would the filter queries I write for searching users across geographic locations work if I run them on the root AD server ?. The query I use is

(|(objectClass=user)(objectClass=person)(objectClass=inetOrgPerson))

I cannot actually test this scenario but need to know the what will happen here.

share|improve this question

1 Answer 1

In Active Directory there is no real partitioning of the directory. If you need to make a subset of users, that replicate differently you would need a new domain, with its own set of domain controllers.

So that means your domain controller (What you call an Active Directory Server) in each geographic region probably has a full copy of all users. If it does not, then each geographical region is its own domain.

Thus your query should work on any of the DC's, assuming it is a single domain. If not, then the query will try to traverse the domain structure and will need network access for an LDAP query to the other DC's.

In your case it is actually is the search base, not the filter that you would need to worry about the most. That is, where does the search begin. Should there be geographically separate Domains, then you would want to search in the appropriate containers per location.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.