Here's what Doc was talking about. When filtering an LDAP object one has to use this method to get the filter to work properly. For large AD domains, like Doc's, it is faster than testing the .Class property...

Code:

Break On

$ticks = @ticks
Dim $sFilter[0] $sFilter[0]="User"
$Objects = GetObject('LDAP://CN=users,DC=company,DC=com')
$Objects.Filter = $sFilter
For Each $Object in $Objects
;If $Object.Class = "User"
$i = $i + 1
;EndIf
Next

$i " objects enum'd in "@ticks-$ticks" ticks." ?