LDAP Query: Administrators on a computer

Question

Hello,

I want to search every computer known to LDAP and list all accounts on each computer which are Administrators.

I'm familiar with LDAP queries, I just don't know if this is possible, and if it is - what the syntax would be.

Thanks in advance,

Jim

Answer 1

You should go with System.DirectoryServices namespace.

There are some samples here: .Net Directory Services Programming - C# - Part 1

Answer 2

As far as I know, you can't do that. You can use, however, a script wich first performs the LDAP query and then uses the results to connect to each server and query members of the administrators group via LanManager API. If you want to do it in perl you should use Net::LDAP and Win32API::Net