DirectorySearcher not searching entire directory

Question

I'm using System.DirectoryServices.DirectorySearcher for traversing Active Directory for users. In most cases, this works fine. The code is pretty much as follows:

Ldapconnection conn = CreateConnection(...);
System.DirectoryServices.DirectorySearcher searcher = new System.DirectoryServices.DirectorySearcher();
searcher.SearchScope = System.DirectoryServices.SearchScope.Subtree;

foreach (System.DirectoryServices.SearchResult result in searcher.FindAll()) {
}

For some reason, this doesn't always traverse the tree completely. If I specify the searchroot to point at a missing subtree, it does import that subtree.

Am I missing something?

When it doesn't work as expected, is the SearchResultCollection returned by the FindAll method count 1000? — dugas, Mar 25 '11 at 17:27

score 2 · Answer 1 · answered Mar 25 '11 at 17:30

2

Is it stopping at 1000 users? I believe AD is setup by default to only return 1000 objects.

answered Mar 25 '11 at 17:30

scottrudy

1,633
1
14
24

First, I only got around 150 users. Second attempt around a thousand, actually. So my second attempt might actually be correct, but I hit the limit. Any way to work around that? – kh34 Mar 27 '11 at 08:42

dugas · Answer 2 · 2011-03-25T17:52:58.900

If the SearchResultCollection's count is 1000 in the cases that you experience the problematic behavior, try setting the PageSize property on the DirectorySearcher to 1000.

Ldapconnection conn = CreateConnection(...); 
DirectorySearcher searcher = new System.DirectoryServices.DirectorySearcher();
searcher.SearchScope = System.DirectoryServices.SearchScope.Subtree;
searcher.PageSize = 1000;

foreach (System.DirectoryServices.SearchResult result in searcher.FindAll()) { }

DirectorySearcher not searching entire directory

2 Answers2