LDAP Filters for Active Directory Environments

AD - Computers:
(objectCategory=Computer)

AD - Contacts
(objectCategory=contact)

AD - Domain Controllers
(&(objectCategory=Computer)
(userAccountControl:1.2.840.113556.1.4.803:=8192))

AD - Exchange Recipients
(mailNickname=*)

AD - Exchange Recipients - hidden
(&(msExchHideFromAddressLists=TRUE)(!objectClass=publicFolder))

AD - Exchange Recipients - with FAX address
(proxyAddresses=FAX:*)

AD - Exchange Servers
(&(objectClass=msExchExchangeServer)(!(objectClass=msExchExchangeServerPolicy)))

-> Use the AD Forest configuration container as a search base!

AD - Global Catalogs
(&(objectCategory=nTDSDSA)(options:1.2.840.113556.1.4.803:=1))
-> Use the AD Forest configuration container as a search base!

AD - Groups - empty
(&(objectClass=group)(!member=*))

AD - Groups - security groups
(groupType:1.2.840.113556.1.4.803:=2147483648)

AD - Objects - cant be deleted
(systemFlags:1.2.840.113556.1.4.803:=-2147483648)

AD - Objects - cant be renamed
(systemFlags:1.2.840.113556.1.4.803:=134217728)

AD - Users
(&(objectCategory=person)(objectClass=user))

AD - Users (more effective)
(sAMAccountType=805306368)

AD - Users - disabled
(&(sAMAccountType=805306368)(userAccountControl:1.2.840.113556.1.4.803:=2))

AD - Users - dont require password
(&(sAMAccountType=805306368)(userAccountControl:1.2.840.113556.1.4.803:=32))

AD - Users - mail enabled
(&(sAMAccountType=805306368)(mailNickname=*))

AD - Users - password never expires
(&(sAMAccountType=805306368)(userAccountControl:1.2.840.113556.1.4.803:=65536))

LDAP Filters for Novell eDirectory Environments

eDirectory - NetWare Servers
(objectClass=ncpServer)

eDirectory - NetWare Volumes
(objectClass=volume)

eDirectory - ZEN Applications
(objectClass=appApplication)

LDAP Filters for all LDAP Environments (including Active Directory and eDirectory)

LDAP - Groups
(|(objectClass=group)(objectClass=groupOfNames))

LDAP - InetOrgperson
(objectClass=inetOrgPerson)

LDAP - OUs
(objectClass=organizationalUnit)

LDAP - Users
(|(objectClass=inetOrgPerson)(objectClass=user))

LDAP - Users - with Certificates
(&(|(objectClass=inetOrgPerson) (objectClass=user))(userCertificate=*))

LDAP - Users - with Passwords
(&(objectClass=inetOrgPerson)(userPassword=*))
-> For generic LDAP environments

LDAP - Users - without Mailaddress
(&(objectClass=inetOrgPerson)(!(mail=*)))
-> For generic LDAP environments