Active Directory Cookbook for windows server 2003- P33:If you are familiar with the O'Reilly Cookbook format that can be seen in other popular books, such as the Perl Cookbook, Java Cookbook, and DNS and BIND Cookbook, then the layout of this book will not be anything new to you. The book is composed of 18 chapters, each containing 10-30 recipes for performing a specific Active Directory task. Within each recipe are four sections: problem, solution, discussion, and see also. | New ANR attribute strAttrName ptt The CLI and VBScript solutions assume that searchFiags wasn t j. previously set and just blindly overwrites whatever value is present if one h- 1 was. Check out Recipe for a better solution that will enable the bit you want without overwriting any previous settings. Discussion ANR is an efficient search algorithm that allows for a complex search filter to be written using a single comparison. For example a search for anr Jim Smith would translate into the following query An OR filter with every attribute in the ANR set against Jim Smith A filter for givenName Jim and sn Smith A filter for givenName Smith and sn Jim These filters are ORed together and then processed by Active Directory. Since all default ANR attributes are also indexed the query return should come back quickly. Here is a list of the default attributes that are included as part of ANR searches. The LDAP display name of the attribute is shown first with the common name in parenthesis. displayName Display-Name givenName Given-Name legacyExchangeDN Legacy-Exchange-DN msDS-AdditionalSamAccountName ms-DS-Additional-Sam-Account-Name physicalDeliveryOfficeName Physical-Delivery-Office-Name name RDN sAMAccountName SAM-Account-Name sn Surname msDS-AdditionalSamAccountName was added as an ANR attribute in Windows Server 2003. It is important to make sure that any new ANR attributes are also indexed. ANR searches are intended to be very fast and if a non-indexed attribute was added to the set it could dramatically impact the performance of the searches. You can find which attributes are included in the ANR set by using the following search criteria Base cn Schema cn Configuration ForestRootDN Filter 331 objectcategory attributeSchema searchFlags 4 Scope onelevel Alternatively to find attributes that aren t included in ANR change the previous search filter to the following objectcategory attributeSchema searchFlags
