Suman Chakrabarti - SharePoint and ASP.NET blog : ADSI

MOSS Profile Search LDAP query to remove disabled and service accounts

Suman Chakrabarti — Thu, 28 Jun 2007 17:28:00 GMT

To put together the right query to get users that are not disabled accounts nor service accounts, you will need to add the following parameters to the query.

Update: I found a better approach to removing disabled accounts

(!userAccountControl:1.2.840.113556.1.4.803:=2) - removes disabled accounts
(!userAccountControl=65536) - removes accounts with password set to never expire

Your LDAP string should look something like this:

(&(objectCategory=person)(objectClass=user)(!userAccountControl:1.2.840.113556.1.4.803:=2)(!userAccountControl=65536))

For more ADSI userAccountControl flags go here: http://msdn2.microsoft.com/en-us/library/aa772300.aspx

Active Directory Activities for Windows Workflow Foundation posted

Suman Chakrabarti — Thu, 21 Dec 2006 19:06:00 GMT

My Active Directory activities have been published to the .NET 3.0 web site. They are available here: http://wf.netfx3.com/files/folders/communications/entry7716.aspx

I've included a simple sample and I will probably tag in an screenshot of a sample workflow.

Enjoy!

WinWF Active Directory Activities

Suman Chakrabarti — Thu, 30 Nov 2006 08:32:00 GMT

I've been working on building out some AD activities for Windows Workflow Foundation. A few months ago, I put together activities for the following retrieval activities:

GetUserActivity
GetManagerActivity
ChangePassword
CreateUser

Anyone have ideas on anything else? I'd like to just make a little framework of AD components for the WinWF site when I finally upload it.