Quote:

---

so, normal user can't query information about a networked computer if he is not locked on it?

---

	$DN = TranslateName (3, "", 3, "@Domain\@wksta$", 1)
	$DN = $DN[0]
	$DN = split($DN,',DC=')[0]
	$DN = Split($DN,',OU=')
	$ubound = ubound($DN)
	If $ubound > 1
	   $ComputerLOC = $DN[$ubound]
	   $secondLevel = $DN[$ubound-1]
	   If $ComputerLOC = 'HQ'
	      if instr('BIR;HAT;HFR',$secondLevel)
	         $ComputerLOC = $secondLevel
	      EndIf
	   EndIf
	EndIf
	If $DN[1] = "Metaframe"
		$ComputerLOC = "CITRIX"
	EndIf
	If $DN[1] = "Memphis"
		$ComputerLOC = "MER"
	EndIf

2147352567
COM exception error "Init" - ((null) - (null)) [-2147352567/80020009]

Quote:

---

Based on you use of the inputs in TranslateName (3, "", 3, "@Domain\@wksta$", 1), you client can not find the global catalog. This may be a DNS issue.

Try binding to the domain as another test.

TranslateName (1, @Domain, 3, "@Domain\@wksta$", 1)

---

	;$DN = TranslateName (1, @DOMAIN, 3, "@Domain\@wksta$", 1)
	;$DN = TranslateName (3, "", 3, "@Domain\@wksta$", 1)
	$DN = TranslateName (2, "HQDC1", 3, "@Domain\@wksta$", 1)

Quote:

---

So you are saying that from the same computer one user gets data returned and a different user does not?

---

Quote:

---

I suspect it is permissions, but not local perms but rather AD perms.

---

Any ideas in which direction I should be looking to narrow that down? I am not aware of the "Allow DNS lookup" checkbox

On Error Resume Next
	Dim oUser,oArgs
	Set oArgs=WScript.Arguments
	strUser=oArgs(0)
	UserDN=GetDN(strUser)
	WScript.Echo UserDN
	WScript.quit
	
Function GetDN(samAccount)
On Error Resume Next
	GetDN=samAccount & " NotFound"
	set RootDSE=GetObject("LDAP://RootDSE")
	set myDomain=GetObject("LDAP://"&RootDSE.get("DefaultNamingContext"))
	'the query should all be on one line
	strQuery="Select sAMAccountname,cn,distinguishedname from 
'broken line
'" & myDomain.ADSPath & "' Where objectcategory='person' AND objectclass='user'" & " AND sAMAccountName='" & samAccount & "'"
set cat=GetObject("GC:")
for each obj in cat
set GC=obj
Next
AdsPath=GC.ADSPath
Set conn=Createobject("ADODB.Connection")
Set cmd=CreateObject("ADODB.Command")
conn.Provider="ADSDSOObject"
conn.Open
set cmd.ActiveConnection=conn
Set RS=conn.Execute(strQuery)
Do while not RS.EOF
GetDN=rs.Fields("distinguishedname")
rs.movenext
Loop
rs.Close
conn.Close
Set conn=Nothing
set cmd=Nothing
set RootDSE=Nothing
set cat=Nothing
set RS=nothing
End Function
'EOF

	$DN2 = TranslateName (3, "", 3, "@LDomain\@USERID", 1)

 ; == Return the distinguishedName for the computer ===================  
 $aAttributes = "distinguishedName"  
 $sADsPath = "LDAP://"+GetObject("LDAP://rootDSE").Get("defaultNamingContext")  
 $strFilter = "(&(objectClass=Computer)(Name="+@WKSTA+"))"  
  
 $aResults = fnLDAPQuery($aAttributes,$sADsPath,$strFilter)  
 @ERROR " | " @SERROR ?  
  
 For Each $Result in $aResults  
	$Result ?  
 Next  

Quote:

---

Give fnLDAPQuery() a try. Here is an example for the current workstation...

Code:

---

 ; == Return the distinguishedName for the computer ===================  
 $aAttributes = "distinguishedName"  
 $sADsPath = "LDAP://"+GetObject("LDAP://rootDSE").Get("defaultNamingContext")  
 $strFilter = "(&(objectClass=Computer)(Name="+@WKSTA+"))"  
  
 $aResults = fnLDAPQuery($aAttributes,$sADsPath,$strFilter)  
 @ERROR " | " @SERROR ?  
  
 For Each $Result in $aResults  
	$Result ?  
 Next  

---

---

Quote:

---

Trying to determine if this is a permissions issue.

Place the user account that does not work into the domain Adminstorators group. From the computer that you have been doing the previous testing, does the script work with th the user being a domain admin?

---

;Determine Computer OU	
	? Color $SC1 "- Querying Active Directory..."
	$DN = TranslateName (3, "", 3, "@Domain\@wksta$", 1)
	$DN = $DN[0]
	:LOOKUPFAILED
	$DN = split($DN,',DC=')[0]
	$DN = Split($DN,',OU=')
	$ubound = ubound($DN)
	If $ubound > 1
	   $ComputerLOC = $DN[$ubound]
	   $secondLevel = $DN[$ubound-1]
	   If $ComputerLOC = 'HQ'
	      if instr('BIR;HAT;HFR',$secondLevel)
	         $ComputerLOC = $secondLevel
	      EndIf
	   EndIf
	EndIf
	If UBound($DN) > 0
		Select
			Case $DN[1] = "Metaframe"   $ComputerLOC = "CITRIX"
			Case $DN[1] = "Memphis"     $ComputerLOC = "MER"
		EndSelect
	Else
		? Color $SC3 "- Please Wait..." Color $SC1
		Shell "%COMSPEC% /C cscript.exe /NoLogo @LDrive\Global\computerdn.vbs @wksta$ > %TEMP%\cdn.txt"
		Shell "%COMSPEC% /C cscript.exe /NoLogo @LDrive\Global\userdn.vbs @USERID > %TEMP%\udn.txt"
		$FH = FreeFileHandle()
		$ = Open($FH, "%TEMP%\cdn.txt")
		$DN = ReadLine($FH)
		$ = Close($FH)
		$FH = FreeFileHandle()
		$ = Open($FH, "%TEMP%\udn.txt")
		$LOOKUPFAILED = "1"
		$DN2 = ReadLine($FH)
		$ = Close($FH)
		Goto LOOKUPFAILED		
	EndIf 

;Determine User OU
	If $LOOKUPFAILED <> "1"
		$DN2 = TranslateName (3, "", 3, "@LDomain\@USERID", 1)
		$DN2 = $DN2[0]
	EndIf
	$DN2 = split($DN2,',DC=')[0]
	$DN2 = Split($DN2,',OU=')
	$ubound = ubound($DN2)
	If $ubound > 1
	   $USERLOC = $DN2[$ubound]
	   $secondLevel = $DN2[$ubound-1]
	   If $USERLOC = 'HQ'
	      if instr('BIR;HAT;HFR',$secondLevel)
	         $USERLOC = $secondLevel
	      EndIf
	   EndIf
	EndIf