Filtering an AD mmc with a script

[Noventta]

Hi all,

I want to create a custom filtering in a active directory users and
computers MMC (View -> filter options -> Create custom - > customize ->
advanced) based upon the groups that are "managed by" the currently logged
user.

With a script i can get the LDAP query required but I can't figure out how
to put in the MMC filter without a manual intervention.

My LDAP query look like this (if it can help) :
(ObjectCategory=group)(managedBy=cn=user1,ou=admin,dc=test01,dc=local)

If you know how to or have another method, tell me

Thx

[Richard Mueller]

Post by Noventta
Hi all,
I want to create a custom filtering in a active directory users and
computers MMC (View -> filter options -> Create custom - > customize ->
advanced) based upon the groups that are "managed by" the currently logged
user.
With a script i can get the LDAP query required but I can't figure out how
to put in the MMC filter without a manual intervention.
(ObjectCategory=group)(managedBy=cn=user1,ou=admin,dc=test01,dc=local)
If you know how to or have another method, tell me

Hi,

Your query has two clauses and you just need to "And" them. For example this
should work:

(&(ObjectCategory=group)(managedBy=cn=user1,ou=admin,dc=test01,dc=local))

The "&" is the "And" operator. For some more examples, see this link:

http://www.rlmueller.net/ADOSearchTips.htm

The link shows how to use LDAP queries with ADO, but the filter clauses can
be used in ADUC as you describe. You can also use Or and Not operators.

[Noventta]

Thanks for the great link but what I really wanted was a way to insert my
query, wich I get from a script, into a filtering option of a MMC with active
directory users and computers snap-in.

What I want is a MMC with active directory users and computers snap-in so
that some of my users can actully managed some groups. Since we have over
2800 users I won't let them search trough all of the objects by themselves
hence the point of a filter.

I don't want to make a personalized MMC for each of them either since if the
"manager" of the MMC changes, I will need to make it all over.

So unless I read wrong your site and the links in it, it does not tell me
how to do it.