using global catalog to grab users by company name

[Kamalis14]

Is it possible to to grab the users from say 4 different companys that reside on 3 different domains(1 domain has 2 companies on it) in a tree that consists of 10 domains total. I didnt think I could use the LDAP since it spans different domains so I was thinking of using GC. Does something similar to this seem possible to only grab the users from the desired companys.

<GC://FullyQualifiedDomainNameFromWithinTheDomainForest>;(&(objectClass=user)(objectCategory=person) (samAccountName=*)(mail=*)(sn=*)(|(company=comp1)(company=comp2)(company=comp3)(company=comp4))(givenName=*));sn,givenName,mail,samAccountName,department,company;Subtree

Any comments would be appreciated. Thanks!

 

[tsuji]

The guiding principle is that you won't set up the criteria involving attribute not replicated to the GC. Company is not the one in the ms implementations of ad. This is the documentation you've to check for this kind of info on company attribute in particular:

http://msdn2.microsoft.com/en-us/library/ms675457.aspx

You'll see the line "In Global Catalog : false".

Search GC without those criteria on company and add adspath to the return. From the adspath, bind to the user and then to discover the company. That would be to me how the procedure should go.