$ADS_SCOPE_SUBTREE = 2

$objConnection = CreateObject('ADODB.Connection')
$objCommand = CreateObject('ADODB.Command')
$objConnection.Provider = 'ADsDSOObject'
$objConnection.Open('Active Directory Provider')

$objCommand.ActiveConnection = $objConnection
$objCommand.CommandText = "SELECT distinguishedName, canonicalName, cn, employeeID, department FROM 'LDAP://dc=domain,dc=pheaa,dc=org' WHERE objectCategory='user' and sAMAccountName='user1'"
$objRecordSet = $objCommand.Execute()

$distinguishedName = $objRecordSet.Fields('distinguishedName').Value
;$canonicalName     = $objRecordSet.Fields('canonicalName')        ;script error
$canonicalName     = $objRecordSet.Fields('canonicalName').item(0) ; 0
;$canonicalName     = $objRecordSet.Fields('canonicalName').Value   ;script error
$cn                = $objRecordSet.Fields('cn').Value
$employeeID        = $objRecordSet.Fields('employeeID').Value
$department        = $objRecordSet.Fields('department').Value

"var=" + vartype($canonicalName)

? $distinguishedName
? $canonicalName
? $cn
? $employeeID
? $department
?

var=8204
CN=Bullock\, Howard A (P609154),CN=Users,DC=domain,DC=pheaa,DC=org

ERROR : Error in expression: this type of array not supported in expressions.!
Script: C:\data\Automation\LogonScript\test.kix
Line  : 22

$CanonicalName=Join($objRecordSet.Fields("canonicalName").Value)

$ADS_SCOPE_SUBTREE = 2

$objConnection = CreateObject('ADODB.Connection')
$objCommand = CreateObject('ADODB.Command')
$objConnection.Provider = 'ADsDSOObject'
$objConnection.Open('Active Directory Provider')

$objCommand.ActiveConnection = $objConnection

$DN=GetUserDN("")
? $DN
$strBase = "<LDAP://" + $DN +  ">"
$strFilter = "(&(objectCategory=person)(objectClass=user))"
$strAtt="distinguishedName, canonicalName, cn, employeeID, department"

$strQuery = $strBase + ";" + $strFilter + ";" + $strAtt + ";subtree"
$objCommand.CommandText=$strQuery

$objRecordSet = $objCommand.Execute()


$CanonicalName=Join($objRecordSet.Fields("canonicalName").Value)
? $CanonicalName




Function getUserDN(optional $username)
  Dim $objTrans
  if $username=""
    $username=@ldomain + "\"+ @userid
  endif
  if not instr($username,"\")
    $username=@ldomain + "\" + $username
  endif
  $objTrans = CreateObject("NameTranslate")
  if @error
    exit @error
  else
    $objTrans.Init(3, "")
    $objTrans.Set(3,$username)
    $getUserDN = $objTrans.Get(1)
    if @error
      exit @error
    endif
  endif
EndFunction