LDAP query against whenCreated timestamp

[Bruce Robertson]

I have been trying to use an LDAP query to list all objects created in
the past month. I see the attribute "whenCreated" and the value
appears to be a string of numbers in the format YYYYMMDDHHmmSS.0Z,
where Y is year, M is Month, D is date, H is hour, m is minute, S is
seconds. The .OZ always appears at the end. No clue why.

I thought I could write a query that looks like this to obtain all
users created in May of 2003:

(&(objectclass=user)(whenCreated=200305*))

This query does not work. When I copy the exact timestamp from a user
into the query, it works fine, returning the users that have that
exact time stamp (which is always only 1 user). I don't know why the
wildcard won't work. Any help is appreciated. I have tried this query
in the Windows Server 2003 version of AD Users and Computers (Saved
Queries), as well as Softerra's LDAP Administrator application. It
doesn't work in either.

I realize I can do a broader search of say, all users, have this value
returned, then sort by whenCreated, but that's not what I want to do.
Any help is appreciated.

Bruce

[David Hou [MSFT]]

Substring search is not supported for the syntax 2.5.5.11.

In your case, you can try the following:

(&(objectclass=user)(whenCreated>=20030501000000.0Z)(whenCreated<=2003053123
5959.0Z))

though perhaps you also need convert the time zone to yours...

David
--
This posting is provided "AS IS" with no warranties, and confers no rights.
"Bruce Robertson" <amou...@hotmail.com> wrote in message
news:f14b60c3.03060...@posting.google.com...

[Joe Richards [MVP]]

The 0Z means zulu time I believe... I.E. Universal Time Coordinate time (UTC) which is GMT.

You need to specifify a greaterthan equal and lessthan equal time frame as David indicated.

--
Joe Richards
www.joeware.net

--

"Bruce Robertson" <amou...@hotmail.com> wrote in message news:f14b60c3.03060...@posting.google.com...