DirectorySearcher：如何只获取“真正”用户的条目

Question

search.Filter = "(&(objectClass=user)(objectCategory=person))";

henry.miller            <-wanted
ernest.hemingway        <-wanted
HealthMailboxced7671    <-not wanted 

string DomainPath = "LDAP://DC=writers,DC=local";
DirectoryEntry searchRoot = new DirectoryEntry(DomainPath);
DirectorySearcher search = new DirectorySearcher(searchRoot);
search.Filter = "(&(objectClass=user)(objectCategory=person))";
search.PropertiesToLoad.Add("samaccountname");

SearchResult result;

SearchResultCollection resultCol = search.FindAll();

if (resultCol != null)
{
    for (int counter = 0; counter < resultCol.Count; counter++)
    {
        result = resultCol[counter];

        if (result.Properties.Contains("samaccountname"))
        {
            Console.WriteLine((String)result.Properties["samaccountname"][0]);
        }
    }
}

Answer 1

下面使用LDAP进行尝试

 (&(objectCategory=person)(objectClass=user)(sAMAccountName=*)(!(cn=*O*)))

只是为了信息-CN是通用名称。您可以在这里获得更多关于LDAP的信息

你还问我你用什么财产可以取回CN。在这里，您可以通过这个代码片段进行提取（以供反复检查）。但据我所知只有CN

 foreach (string property in result.Properties.PropertyNames)
{
      foreach (Object propertyValue in result.Properties[property])
     {
        // print out the Property Value here
      }
}