Enumerating Indexed Attributes in Windows 2000 Active Directory (230662)

SUMMARY

To achieve the best performance when querying against the Active Directory, you should query indexed attributes. Indexed attributes are configured with the searchFlags bit set of 0x00000001.

To enumerate all indexed attributes, bind to the schema container and use the following LDAP filter:

(&(objectCategory=attributeSchema)(searchFlags:1.2.840.113556.1.4.803:=1))

MORE INFORMATION

To use the Ldp.exe program to query the active directory enumerating attributes that are indexed for quick searches:

Start the Ldp.exe program, and then increase the text buffer size to 9999.
Bind to a Windows 2000-based domain, and then determine the schema's distinguished name by observing the output of LDP
```
schemaNamingContext: CN=Schema,CN=Configuration,DC=domainName,DC=com
						
```
On the Browse menu, click Search, and then type the schemNamingContext value into the Base DN box.

Type the following filter into the Filter Box:

(&(objectCategory=attributeSchema)(searchFlags:1.2.840.113556.1.4.803:=1))

Click Subtree for the Scope, and then click Options.

Enter the attributes you want to be returned:

objectClass;name;cn;distinguishedName;

In the Search Options box, click OK, and then click Run to execute the query.

For additional related information, please see the following article in the Microsoft Knowledge Base:

224543 Using Ldp.exe to Find Data in the Active Directory