2.2.3.1 LDAP SearchRequest Message

Each LDAP SearchRequest message (sections 3.1.5.3 and 3.2.5.1) MUST have the following parameters:

Parameter name	Value
baseObject	The value of this parameter MUST be the LDAP distinguished name (DN) for the PushedPrinterConnections container (section 2.2.1.1) inside the User or Machine section of the GPO; and it MUST be in the following form, where <GPO_GUID> is the curly braced GUID string of the GPO that is being queried, and <x>, <y>, <z> is the FQDN of the domain/LDAP server: CN=PushedPrinterConnections, CN=Machine, CN=<GPO_GUID>, CN=Policies, CN=System, DC=<x>, DC=<y>, DC=<z> CN=PushedPrinterConnections, CN=User, CN=<GPO_GUID>, CN=Policies, CN=System, DC=<x>, DC=<y>, DC=<z>
scope	The value of this parameter MUST be 2 to search the whole subtree.
derefAliases	The value of this parameter MUST be zero (never dereference aliases).
sizeLimit	The value of this parameter MUST be zero (no size limit).
timeLimit	The value of this parameter can be zero if there is no time limit, or it can be the number of seconds; however, it has no direct influence on the protocol defined in this specification.
typesOnly	The value of this parameter MUST be zero (FALSE).
filter	The value of this parameter MUST be an LDAP filter of "(objectClass=msPrint-ConnectionPolicy)". This query is filtered so that only msPrint-ConnectionPolicy objects are returned.
attributes	The value of this parameter MUST be an AttributeDescriptionList ([RFC2251] section 4.1.5). The AttributeDescriptionList MUST contain uNCName and printAttributes attribute names.