Merge pull request netwrix#17 from cnotin/patch-4

"DnsAdmins" group is under the "CN=Users" container by default (not at domain root)
woundride · Oct 12, 2019 · 19adb81 · 19adb81
2 parents faa2cb0 + 757b641
commit 19adb81
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Healthcheck/HealthcheckAnalyzer.cs b/Healthcheck/HealthcheckAnalyzer.cs
@@ -1159,7 +1159,7 @@ private void GeneratePrivilegedGroupData(ADDomainInfo domainInfo, ADWebService a
 					dnsAdminFound = true;
 				};
 			// we do a one level search just case the group is in the default position
-			adws.Enumerate(domainInfo.DefaultNamingContext, "(&(objectClass=group)(description=DNS Administrators Group))", properties, callback, "OneLevel");
+			adws.Enumerate("CN=Users," + domainInfo.DefaultNamingContext, "(&(objectClass=group)(description=DNS Administrators Group))", properties, callback, "OneLevel");
 			if (!dnsAdminFound)
 			{
 				// then full tree. This is an optimization for LDAP request