tags:

views:

20

answers:

0

I've inherited some code that queries AD for an AD group's "subgroups". I've added a subgroup and am testing the code. The following query results in a record with my account's info even though I am not in the subgroup, along with the 4 records of the group's 4 subgroups. Can anyone tell my why the following query would include the result record below:

query:

SELECT member, description 
FROM 'LDAP://DC=qt,DC=local' 
WHERE cn='Domain NET-Payroll Budgets

result record:

CN=Mutch\, Bruce,OU=Corporate User Accounts,OU=Accounts - User,
   OU=1-QuikTrip,DC=qt,DC=local

sample subgroup record:

CN=Domain NET-Payroll Budgets Users,OU=Groups - Programming,
   OU=1-QuikTrip,DC=qt,DC=local