Searching for LitigationHoldEnabled using LDAP only

Hi,

I am looking for a way to query AD to determine mailboxes that are set with the "litigation hold" flag enabled.

So far, I have found that the msExchELCMailboxFlags attribute (a bit flag) stores this state in the 4th bit (decimal 8), but this is an unofficial source:

http://justtinkering.wordpress.com/2011/07/14/active-directory-user-msexchelcmailboxflags-attributes-shows-if-in-exchange-2010-retention-hold-is-enabled/

I'd like to be able to write an LDAP query like this:

(&(objectCategory=person)(objectClass=user)
(userAccountControl:1.2.840.113556.1.4.803:=512)
(msExchELCMailboxFlags:1.2.840.113556.1.4.803:=8))

(i.e., standard user accounts that have the "litigation hold" flag set)

I can't find any official MS documentation on the msExchELCMailboxFlags attribute or the flags in it, though.

Am I missing something?

-- Bill Stewart [Bill_Stewart]