Using Get-ADMGroup doesn't find all the groups in all the registered domains.

Question

I'm learning how to use the Adaxes powershell commands.

I've tried searching for a group and that fails to find anything but the local domain. I thought if I used the switches and designate an Adaxes server for the service and the proper credentials it would return all items across the domains. This doesn't seem to be happening.

This fails to find the Administrators groups in all domains. It returns just one domain.

Get-AdmGroup -AdaxesService ADAXES01.domain.com -Credential $myCredentials -Identity Administrators

Answer 1

Hello,

This behavior is by design. It is not possible to use a cmdlet to perform a search in multiple domains at once. The domain to search in is controlled by the -Server parameter. To search objects in all the domains managed by Adaxes, you need to use the approach like in the following example: https://adaxes.com/sdk/SampleScripts.SearchingGroups. For the search to be performed in all the managed domains, set the VirtualRoot search parameter to True. For details about search parameters, see https://adaxes.com/sdk/IAdmDirectorySearcher.

Comments

I still don't understand how to use this virtual root. I'm not understanding how I go about "Binding" to this virtual root. None of the examples show this.

The examples always show binding to a specific OU or account. I understand this. How do I bind to the virtual root?

Example from site: `[Reflection.Assembly]::LoadWithPartialName("Softerra.Adaxes.Adsi")

$admNS = New-Object "Softerra.Adaxes.Adsi.AdmNamespace" $admService = $admNS.GetServiceDirectly("localhost")

$searcher = $admService.OpenObject( "Adaxes://OU=People,DC=company,DC=com", $NULL, $NULL, 0)

$searcher.SearchFilter = "(&(objectCategory=person)(objectClass=user)(department=Sales))" $searcher.SearchScope = "ADS_SCOPE_SUBTREE" try { $results = $searcher.ExecuteSearch() foreach ($result in $results.FetchAll()) { Write-Host $result.ADsPath } } finally { $results.Dispose() }`

The above example shows

$searcher = $admService.OpenObject( "Adaxes://OU=People,DC=company,DC=com", $NULL, $NULL, 0)

What would I bind to?

---

I tried

$searcher = $admService.OpenObject("Adaxes://rootDSE", $NULL, $NULL, 0)

But it doesn't work.

---

Ah I finally understand. :)

$admNS = New-Object "Softerra.Adaxes.Adsi.AdmNamespace" $admService = $admNS.GetServiceDirectly("USCPADAXES01")

$searcher = $admService.OpenObject("Adaxes://rootDSE", $NULL, $NULL, 0)

$searcher.SearchFilter = "(&(objectCategory=person)(objectClass=user)(department=Information Systems))" $searcher.SearchScope = "ADS_SCOPE_SUBTREE" $searcher.VirtualRoot = $true try { $results = $searcher.ExecuteSearch() foreach ($result in $results.FetchAll()) { Write-Host $result.ADsPath } } finally { $results.Dispose() }

Thank you.