2.2.3.1 LDAP SearchRequest Message

Each LDAP SearchRequest message (sections 3.1.5.3 and 3.2.5.1) MUST have the following parameters:

Parameter name

Value

baseObject

The value of this parameter MUST be the LDAP distinguished name (DN) for the PushedPrinterConnections container (section 2.2.1.1) inside the User or Machine section of the GPO; and it MUST be in the following form, where <GPO_GUID> is the curly braced GUID string of the GPO that is being queried, and <x>, <y>, <z> is the FQDN of the domain/LDAP server:

  • CN=PushedPrinterConnections, CN=Machine, CN=<GPO_GUID>, CN=Policies, CN=System, DC=<x>, DC=<y>, DC=<z>

  • CN=PushedPrinterConnections, CN=User, CN=<GPO_GUID>, CN=Policies, CN=System, DC=<x>, DC=<y>, DC=<z>

scope

The value of this parameter MUST be 2 to search the whole subtree.

derefAliases

The value of this parameter MUST be zero (never dereference aliases).

sizeLimit

The value of this parameter MUST be zero (no size limit).

timeLimit

The value of this parameter can be zero if there is no time limit, or it can be the number of seconds; however, it has no direct influence on the protocol defined in this specification.

typesOnly

The value of this parameter MUST be zero (FALSE).

filter

The value of this parameter MUST be an LDAP filter of "(objectClass=msPrint-ConnectionPolicy)".

This query is filtered so that only msPrint-ConnectionPolicy objects are returned.

attributes

The value of this parameter MUST be an AttributeDescriptionList ([RFC2251] section 4.1.5). The AttributeDescriptionList MUST contain uNCName and printAttributes attribute names.