title: get active directory container objects for new user
body: <p>I want to create a tree of container objects in an active directory domain that a new user can be added to. I can recurse through the domain and get everything within the directory, but I want to limit my scope to ONLY containers that are valid for users. </p>
  
  <p>What would an LDAP query look like to grab the children of a node that were suitable for a user object? Is there a better way to do this?</p>
  
  <p>I'm using c#, System.DirectoryServices, and .net 3.5 if you are curious.</p>
  
  <p>Thanks!</p>