GetComputerByComputerZone

Returns a computer object with all of its related IBM Security-specific data, given the path to the computer zone associated with the computer.

Syntax

IHierarchicalZoneComputer GetComputerByComputerZone(string zonepath)

Parameter

Specify the following parameter when using this method:

Parameter	Description
zonepath	The LDAP path or distinguished name of the computer zone of the computer object you want to retrieve.

Return value

The computer object as:

Centrify.DirectControl.API.IHierarchicalZoneComputer

Discussion

When you assign computer-level overrides for user, group, or computer role assignments, the IBM Security Windows API creates a computer zone, a IBM Security zone in Active Directory that contains the users, groups, and computer role assignments that are specific to only that one computer. Computer zones are not exposed in Access Manager.

This method returns the computer object using the LDAP path or distinguished name of the computer zone. The LDAP path to a computer zone uses the following format:

LDAP://[domain/]attr=name,[...],dc=domain_part,[...]

For example, if you use the default parent location for computer accounts in the domain arcade.com, the LDAP path for the computer account magnolia is:

LDAP://cn=magnolia,cn=Computers,dc=arcade,dc=com

Exceptions

GetComputerByComputerZone throws an ApplicationException if the method cannot find the specified computer.