Wei is correct.
The CN is the display name for the user. The user logins in with their SamAccountName. So, if you have the SamAccountName you can locate the user in a
couple of ways:
1. Do an LDAP query searching for the matching SamAccoutName
2. Build WinNT ADsPath for the user,then use IADsNameTranslate to convert the WInNT path to its LDAP path.
Max Vaughn [MS]
Microsoft Developer Support
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. You assume all risk for your use.