如何查询名称中包含美元符号（$）的用户的Active Directory？

Question

I have a code snippet that searches for a locally-defined Windows user :

using (PrincipalContext context = new PrincipalContext(ContextType.Machine)) {
    using (Principal queryFilter = new UserPrincipal(context) { Name = accountName }) {
        using (PrincipalSearcher searcher = new PrincipalSearcher(queryFilter)) {
            var principal = searcher.FindOne();
            ...
        }
    }
}

The code works fine if accountName contains normal alphanumerics, (eg "testuser"). However, if the name contains a dollar sign (eg "test$user"), FindOne() returns nothing.

I suspect the $ is being interpreted as some kind of metacharacter. Is there a way of preventing this from happening, so that it is interpreted literally?

Answer 1

If you're only looking for a single entry - try this:

UserPrincipal user = UserPrincipal.FindByIdentity(context, "test$user"); 

Maybe that works?

Answer 2

I think this is an example of a leaking abstraction. You can't do LDAP searches on the WinNT provider, which is what the Machine ContextType is using.