LDAP search

Also, make sure Ingegrated Windows Authentication is checked and nothing else, is you check Anon access, it will overide the other settings I think.

You may also need to add the domain as a trusted site in IE.

Tools > Options > security > sites.

Get the IT guys to add this to your security policy, so you dont have to do it manually to every mahcine.

Thanks, I tried and it keeps giving me an error in the attributes line.
Even if I change or remove some of the attributes it gives me error saying something is wrong with attributes but no other details.
Do I need to tell server admins I am fetching LDAP info so they can change a setting. The directory I am working on in IIS is enabled for Integrated Windows Authentication.

Try something like this, there are quite a few free apps on the web that allow you to browse ldap so you can see its struture and where to start.

<cfset username = right(cgi.AUTH_USER, len(cgi.AUTH_USER) - find("\", cgi.AUTH_USER))>
<cfldap
server = "xxx"
action = "query"
username = "xxx-xxx\tst"
password = "xxxx"
name = "results"
scope="subtree"
filter="samaccountName=#username#"
start = "dc=some domain,dc=local"
attributes = "givenname,surname,uid,userid,groupMembership,mail,dn,roles,memberof,cn,samaccountName" >
<cfset grouplist = "">

<cfif results.recordcount>
<cfoutput query="results">
<cfloop list="#memberof#" delimiters="," index="i">
<!--- get groups --->
<cfif left(trim(i),3) eq "CN=">
<cfif grouplist eq "">
<cfset grouplist = right(trim(i), len(trim(i)) - 3)>
<cfelse>
<cfset grouplist = grouplist & ", " & right(trim(i), len(trim(i)) - 3)>
</cfif>
<cfelse>
<cfset grouplist = grouplist>
</cfif>
</cfloop>
<!--- set user variables --->
<cfset session.grouplist = grouplist>
<cfset session.fullname = cn>
<cfset session.username = samaccountName>
<cfset session.loggedin = "yes">
</cfoutput>

<cfelse>
<h1> Cannot log you in at this time</h1><cfabort>
</cfif>