Since I got your reply until now I couldn’t find any person has knowledge in this issue (LDAP), you might agree with me that LDAP is not like Windows 2000 which you can discuss with many persons.

What I feel is that it might be a small problem or I might missing some thing, therefore I would like to tell you what it might help in analyzing the problem.

When I tried to access this LDAP server from start\run (LDAP://st8en1.dhw.zain.com.st/rootDSE)
I got window with title “Address Book Viewer” and with the following message “There are no entries in the directory service that match tour search criteria”

When I run the same command without /rootDSE, I got a window (like search for file window ) ) with title “Find People” where it ask you to enter name and e-mail address to search for it in the same name of server I entered.

The domain administrator informed me that I can implement any search command over this server without need for admin access, however I have administrator account over the domain root.

Please help.

Thanks.

try Shawn's script with a little change (don't forget to replace the user AD path with the correct one):
break on
$user = GetObject("LDAP://st8en1.dhw.zain.com.st/CN=noor NIaa.,OU=Test,OU=Messaging,DC=zain,DC=com")
if $user
? "user retreived"
else
? "@ERROR ; @SERROR"
endif

exit 1

2) What is the mail server ?
3) I don't understand for the internet authentification server :is it completely independant from the AD domain ?

What I found here that all our users internet account are in the following path.
LDAP://st20en1.dhw.zain.com.st/cn=proxy01, ou=groups, dc=zain, dc=com, dc=st, o=internet

And this what I placed in your function under ($AdoCommand.CommandText) but it did not work.

I did the same thing in shown code $user = GetObject("LDAP://st20en1.dhw.zain.com.st/cn=proxy01, ou=groups, dc=zain, dc=com, dc=st, o=internet").

Based on what I read about this issue, I think I have to have the uniquemember and/or uid.

Please help