code:

---

for each $member in $group.members

---

quote:

---

To search the entire forest

Bind to the root of the GC namespace (GC:).
Enumerate the GC container. The GC container contains a single object that you can use to search the entire forest.
Use the object in the container to perform the search. In C/C++, call QueryInterfaceto get an IDirectorySearch pointer on the object so that you can use the IDirectorySearch interface to perform the search. In Visual Basic, use the object returned from the enumeration in your ADO query.
To enumerate the Global Catalog servers in a site, perform an LDAP subtree search of cn=,cn=sites,, using the following filter string:

(&(objectCategory=ntdsDsa)(options:1.2.840.113556.1.4.803:=1))
This filter uses the OID for the LDAP_MATCHING_RULE_BIT_AND operator (1.2.840.113556.1.4.803) to find nTDSDSA objects that have the low-order bit set in the bitmask of the options attribute. The low-order bit, which corresponds to the NTDSDSA_OPT_IS_GC constant defined in Ntdsapi.h, identifies the nTDSDSA object of a Global Catalog server.

The parent of the nTDSDSA object is the server object, and the dNSHostName property of the server object is the DNS name of the Global Catalog server.

You cannot use #define constants such as NTDSDSA_OPT_IS_GC and LDAP_MATCHING_RULE_BIT_AND directly in a search filter string. However, you could use these constants as arguments to a function such as wsprintf to insert the constant values into a filter string.

---

code:

---

BREAK ON
$adsDomains = GETOBJECT(GC:)
? @SERROR + " : " + @ERROR
FOR EACH $ELEMENT IN $adsDomains
 ? $ELEMENT.Name
NEXT

---

code:

---

BREAK ON
$adsDomains = GetObject(GC:)
? @SERROR + " : " + @ERROR
FOR EACH $ELEMENT IN $adsDomains
	? $ELEMENT.Name
	$adsDomain2 = GetObject("WinNT://"+$ELEMENT.Name)
	;? @SERROR + " : " + @ERROR
	$adsDomain2.Filter = "User",""
	FOR EACH $ELEMENT2 IN $adsDomain2
		? $ELEMENT2.Name
	NEXT
NEXT

---

code:

---

BREAK ON
$adsDomain = GetObject("WinNT:")
? @SERROR + " : " + @ERROR

FOR EACH $ELEMENT IN $adsDomain
	? $ELEMENT.Name
NEXT

---