"DnsAdmins" group is under the "CN=Users" container by default (not a…

…t domain root)
woundride · Oct 8, 2019 · 757b641 · 757b641
1 parent faa2cb0
commit 757b641
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Healthcheck/HealthcheckAnalyzer.cs b/Healthcheck/HealthcheckAnalyzer.cs
@@ -1159,7 +1159,7 @@ private void GeneratePrivilegedGroupData(ADDomainInfo domainInfo, ADWebService a
 					dnsAdminFound = true;
 				};
 			// we do a one level search just case the group is in the default position
-			adws.Enumerate(domainInfo.DefaultNamingContext, "(&(objectClass=group)(description=DNS Administrators Group))", properties, callback, "OneLevel");
+			adws.Enumerate("CN=Users," + domainInfo.DefaultNamingContext, "(&(objectClass=group)(description=DNS Administrators Group))", properties, callback, "OneLevel");
 			if (!dnsAdminFound)
 			{
 				// then full tree. This is an optimization for LDAP request