Advanced data management for corporate and cloud environments

HomeProductsSolutionsSupportAbout
Resources IconResources
Schemus InterChange Box Icon

Uniting distributed data across your organisation. Download the Schemus InterChange overview

Schemus CloudBase Box Icon

Controlled sharing of data with cloud services. Download the Schemus CloudBase overview

Knowledgebase

Enter a phrase or keywords to search our knowledgebase. The search facility supports simple boolean operations (prefix words which must be included with '+' and those to be excluded with '-'), phrase matching (enclose phrase in double quotes) and simple wildcard truncation (e.g. refer*).

  

Results

You can bookmark individual knowledgebase articles by right-clicking on the article title.

How do I exclude distribution groups when searching Active Directory?

Groups in Active Directory have an ObjectCategory of group. Searching for (objectCategory=group) will find all groups from the given search base.

Each Group object contains an integer groupType attribute which holds a set of flags used by Active Directory to define the type of group. The groupType flags are as follows:

0x00000002 Account group.
0x00000004 Resource group.
0x00000008 Universal group.
0x00000010 Application basic group.
0x00000020 Application query group.
0x80000000 Security group.

Security groups have the flag 0x80000000 (which is 2147483648 in decimal) set.
Groups without this flag set are distribution groups.

Active Directory provides the bitwise AND and bitwise OR extensible match filters for examining integer flags. These are represented as 1.2.840.113556.1.4.803 and 1.2.840.113556.1.4.804 respectively.

The following LDAP filter will return security groups using the bitwise AND filter:

(&(objectCategory=group)(groupType:1.2.840.113556.1.4.803:=2147483648))


Address
5 London Road
Great Shelford
Cambridge
CB22 5DB

General Enquiries
Tel: +44 (0) 1223 566733
info@schemus.com

Schemus on LinkedIn

Sales & Support
Tel: +44 (0) 1223 566733
sales@schemus.com
support@schemus.com

All trademarks acknowledged as the property of their respective owners.