If I run the following LDAP sentence on a 2008 R2 Domain Controller,
adoCommand.CommandText = "<LDAP://my2008DC.MyChild.MyPDC.com/CN=Enterprise Admins,CN=Users,DC=MyPDC,DC=com>;(&(objectCategory=group)(cn=*));cn;base" Set adoRecordset = adoCommand.Execute
I get "a referral was returned from the server" error.
However if I run the same script on a 2003 DC, it runs fine.
Notice my2008DC is a global catalog in the MyChild.MyPDC.com domain, would have a partial copy of the MyPDC.com domain and therefore could query that server to find information about objects in MyPDC.com, am I right?
Any clues about why 2003 Domain Controllers are able to run it and 2008 DCs not?