Enumerating Groups on Member Servers and Windows 2000
On member servers and computers running on Windows 2000
Professional, you can enumerate all local groups.
Only local groups can be created on member servers and Windows
2000 Professional. However, those machine local groups can
Universal and Global groups from the forest that contains the
domain to which the computer is a member.
Domain local groups from that computer's domain.
Users from any domain in the forest.
To enumerate the
machine local groups on a member server or computer running Windows
Bind to the computer using the following rules:
Use an account that has rights to access that computer.
Use the following binding string format using the WinNT
provider, computer name, and an extra parameter to instruct ADSI
that it is binding to a computer:
where sComputerName is the name of the computer-groups to
In the binding string, the ",computer" parameter
instructs ADSI that it is binding to a computer. ADSI exposes this
data to the WinNT provider's parser so that it can skip some
ambiguity-resolution queries to determine what type of object you
are binding to.