Searching Microsoft Active Directory using wild cards

If you’re looking for a particular group but don’t know the start of its name (AD search is fairly strict, so searching “iTunes” will not return “APP – iTunes” since it doesn’t begin with “iTunes”) use the below steps. The code can be modified to allow for strict requirements or search all directory items for a more complete search.

1. Open Active Directory Users & Computers
2. Right click the parent node and select search
3. Under “Find” choose “Custom Search” in the drop down menu
4. Select the “Advanced” tab
5. Enter one of the following without quotations into the LDAP query box, depending on your requirement:

• (&(objectcategory=group)(name=*itunes*)) – Will search only within the category “Group”
• (&(objectcategory=computer)(name=*1582*)) – Will search only within the category “Computer”
• name=*itunes* – Will search all elements within Active Directory

6. Click “Find Now”