>Your examples make the process seem a lot simpler that the approach I was taking with ADO.

In addition, last I checked there isn't a provider for WinNT, so you'd have to take the LDAP route.

> It looked like some advantages with ADO might be fetching record sets and applying filters? or do the objects have filters?

That would be the main advantage. For instance, maybe you just want a list of all the users in the MYDOMAIN domain, or just printers that are located near you.

>Also, where do I find reference to the object model?

MSDN under Platform SDK/Networking and.../ADSI/ADSI Reference. It kind of scattered about. Also, check Erik Moore's article in a recent FP Advisor.

> is there a document that cross-walks the properties and methods available in the different directories (LDAP,WinNT,NDS,NWCOMPAT).

Hmm, not that I'm aware of. The information is there, but like I said, it's kind of scattered hither and yon.

> BTW your browser application is awesome and you will be happy to discover it works flawlessly in our environment for all the directories listed above.

Great, glad it's working for you. Check out Erik's browser in the aforementioned article. I'll have to admit, his is slicker. Saves me the trouble of updating dating mine. :-)

>Lastly, how about adds, deletes and updates? I did not see reference to this in the code samples you posted...

Hmm, bummer. I was going to add those capablities in the browser, but you know how hard it is to test that stuff on an internal Microsoft network? They don't take kindly to me adding and deleting network objects (actually, they just deny access).

No matter, the collections objects you would use all have Add and Remove methods. So use something like:

group = GetObject("WinNT://Microsoft/Power Users")
group.remove("WinNT://Microsoft/mikestew")