Question

I am trying to search for all users in a domain A but I do not wish for the search to dig into the sub-domain B.

How can this be done?

I tried including this into filter but not working:

(!(distinguishedName=*DC=domainA*))

I am using coldfusion LDAP function.

Answer 1

It’s possible you can accomplish what you are describing by using start and scope, rather than filter:

<cfldap start="dc=primaryDomain,dc=com" scope="base" .....>

See docs

edit

Alternatively, you could first get all users through the whole directory, then filter it further with a Query of Query call.

<cfquery dbtype="query" name="filteredLDAP">
SELECT * FROM ldapResults WHERE dn not LIKE '%domainA%'
</cfquery>