无法获取我的 AD 中某些组的属性

Question

我正在尝试从公司的 AD 系统中检索所有电子邮件组及其邮件地址。我有大约 1800 个组，但我发现有大约 20 个组我无法获取它们的属性。我在 Outlook 中进行了尝试，并正确获取了邮件地址等属性。但我无法通过代码获取它们，请有人帮忙。谢谢。下面是我的代码片段：

    static void TestGroupEmails()
    {
        ICollection<DirectoryEntry> groups = GetGroups();
        Console.WriteLine(groups.Count + "groups");
        List<String> noNameGroups = new List<String>();
        foreach (DirectoryEntry de in groups)
        {
            String name = de.Properties["sAMAccountName"].Value as String;
            String email = de.Properties["mail"].Value as String;
            if (String.IsNullOrEmpty(email))
                noNameGroups.Add(name);
        }
        StreamWriter writer = new StreamWriter(@"C:\ad\group mails.txt");
        noNameGroups.Sort();
        foreach (String name in noNameGroups)
        {
            writer.WriteLine(name);
        }
        writer.Close();
        Console.ReadLine();
    }

    public static List<DirectoryEntry> GetGroups()
    {
        String filter = @"(&(objectCategory=group))";

        List<DirectoryEntry> groups = new List<DirectoryEntry>();

        using (DirectoryEntry root = new DirectoryEntry(Constants.ADConnPrefix))
        {
            using (DirectorySearcher searcher = new DirectorySearcher(filter, null))
            {
                searcher.PageSize = 10000;

                searcher.ReferralChasing = ReferralChasingOption.All;

                searcher.SearchScope = SearchScope.Subtree;

                searcher.SearchRoot = root;

                root.Username = Constants.UserName;
                root.Password = Constants.Password;

                using (SearchResultCollection searchResult = searcher.FindAll())
                {
                    foreach (SearchResult sr in searchResult)
                    {

                        DirectoryEntry de = sr.GetDirectoryEntry();
                        groups.Add(de);

                    }
                }
            }
        }
        return groups;
    }

    public static SearchResult GetGroupInfo(String groupName)
    {
        String normalName = Utility.RemoveLoginNamePrefix(groupName);
        String filterFormat = "(&(objectCategory=group)(sAMAccountName={0}))";
        using (SearchResultCollection searchResult = Search(ADConnPrefix, null, filterFormat, normalName))
        {
            int count = searchResult.Count;
            SearchResult sr = searchResult[0];
            return sr;
        }
    }

Answer 1

您确定相关群组确实有电子邮件地址吗？ AD 中的群体可能没有它们。

如果您将搜索过滤器修改为 (&(objectCategory=group)(mail=*))，它将过滤掉任何没有电子邮件地址的群组。