active-directory

How can I get the group name from an Active Directory group with .NET?

I have code which as been working against an older Active Directory server and now I have pointed it to a new Windows Server 2008 AD system. Now the group names are coming back with SIDs and not names. I do not know enough about the AD side to know if there is a way to make the new AD server work like the older AD server. My code is bas...

How to instantiate a DirectoryEntry object with a domain?

I have a list of System.DirectoryServices.ActiveDirectory.Domain objects gotten via this method. How do I know instantiate a DirectoryEntry object with this Domain object? The syntax seems to escape me. ...

DirectoryEntry to change password: Different behavior between Vista/Server2008

Hey everyone, On a Vista dev machine I used this code successfully to change user "Administrator" password: directoryEntry.Invoke("SetPassword", "new"); When I moved it over to my Server 2008 dev machine that code did not work, and I was forced to use the following code: directoryEntry.Invoke("ChangePassword", new object[] { "old", ...

need help passing multiple variables from foreach loop to test in switch case statement

$list_of_groups = array("FACULTY","STAFF"); foreach ($list_of_groups as $i => $group) { $user_in_group = $adldap->user_ingroup($username,$group); print "<h2>Group: ".$group." user in group? ".$user_in_group."</h2>"; // if 1, means yes } Need to print run the appropriate function based on what returns true. There are user's that...

How to get full name of Active Directory Domain that workstation is a member of

I thought the NetGetJoinInformation() function might provide the name of the AD Domain a Workstation is a member of but it only provides the domain name in pre-windows 2000 (Netbios) format. For example if the full name of the AD domain is TestDomain.Lan then NetGetJoinInformation() returns TESTDOMAIN as the domain name. Need a fu...

get all domain names on network

i need to get the list of domain names on my network... but i am only getting the domain name with which i log into... so for example there are 2 domains "xyz" and "xyz2" but i get only the domain with which i log into.... here is my code: if (!IsPostBack) { StringCollection adDomains = this.GetDomainList(); ...

How do I deploy .NET Framework 4 using Active Directory deployment?

I know it's possible to deploy earlier versions of the .NET framework using AD deployment, for example: http://msdn.microsoft.com/en-us/library/cc160717.aspx. How do it do this for .NET 4? I tried unpacking the standalone .NET 4 installer and deploying the netfx_Extended_x86.msi package. This didn't work. After a reboot the event log...

Set up silent authentication using LDAP / AD

Hi, Can anybody help with the above. We're using a CMS product called Immediacy, which claims it can handle silent authentication using LDAP / AD but just can't get the thing to work. Ignoring Immediacy, can anybody point me to a good article or post that lays out the steps to do the above (assuming it's achievable)? Basically, we nee...

Single Sign On with apache on windows 7 and mod_auth_sspi

I am running a apache (xampp 1.7.3) server on my local windows 7 PC. This PC is connected to a LAN and a Active Directory domain called "colours". My local username is CHRISTOPHER-PC/Christopher, and the domain username is COLOURS/Christopher. For admin connection to the AD server, I use a PHP scripted called adLDAP. As default, this sc...

Extending GroupPrincipal and Members property

I want to extend the GroupPrincipal class to handle some custom properties: using System.DirectoryServices.AccountManagement; [DirectoryRdnPrefix("CN")] [DirectoryObjectClass("group")] public class MyGroupPrincipal : GroupPrincipal { // ... } How could I override the Members property for MyGroupPrincipal so that if it has a membe...

What does sub error code 568 mean for Ldap Error 49 with Active Directory

I am writing some Java code that authenticates to Active Directory using SASL GSSAPI. Mostly this code is working fine but for one user I am getting the response: javax.naming.AuthenticationException: [LDAP: error code 49 - 8 0090304: LdapErr: DSID-0C0904D1, comment: AcceptSecurityContext error, data 568, v1772 ] I know that 49 means...

Can a user be a member of multiple Organization Units (OU) in Active Directory ?

Can a user be a member of multiple Organization Units (OU) in Active Directory ? Also, is there a standard format mentioned by Microsoft on how an OU should be created and what its attributes are ? I found this in Wikipedia "However, Organizational Units are just an abstraction for the administrator, and do not function as true contain...

How to create a new Active Directory Account from Java (via JNDI)?

Hi: Is it possible to create a new user in AD rom Java via JNDI? I tried via trusty Google but nothing came up - maybe I was googling using the wrong terminology (JNDI Active Directory Create User). Any tips will be create appreciated. Current status: I have connected to AD via my Java code and can change attributes of existing AD a...

Silverlight RIA Services auth active-directory

Hi i am new to ria Services and i am trying to change the logon from SQL to active-directory and stil using the login form i am using the Silverlight Business Application template as base i have setup ADmembership provider in the website but how do i get Silverlight to use it?? ...

How to check whether a user belongs to an AD group and nested groups?

hi guys, I have an ASP.NET 3.5 application using Windows Authentication and implementing our own RoleProvider. Problem is we want to restrict access to a set of pages to a few thousand users and rathern than inputing all of those one by one we found out they belong to an AD group. The answer is simple if the common group we are checki...

Should I use IIS as a trusted proxy to provide ActiveDirectory SSO for a legacy app?

I'm trying to add Active Directory single-sign-on support to an existing SOAP server. Since it is written in C++ using third party transport components, adding AD SSO doesn't appear to be easy. Therefore I am thinking to require IIS as a trusted reverse-proxy and let it do the Active Directory authentication for the SOAP server. That i...

Sharepoint Active directory forms authentication

Hi, I am devloping a sharepoint website in Forms authentication mode. I am trying to authenticate myself/ my company users against company's active directory. The ldap path I received from my technical team is LDAP://infinmumcfac.inf.com OU=Infotech,DC=inf,DC=com I got this piece of code from microsoft site. <membership defaul...

Using Java for 'nslookup -type=srv'

Hi: Is there a way in Java to do a Nslookup search on SRV records? I need to bind to Active Directory and would like to use the SRV records to help determine which of the ADs in the cluster are live. In command line the nslookup search string is: 'nslookup -type=srv _ ldap._tcp.ActiveDirectory domain name' Thanks. ...

How to get cached IE credentials from within activex app?

Here is my setup: 1) 3.5 .net web app(windows authentication with AD) which uses activex to run VB.net application on the client side 2) That VB.net application on the client makes a webservice call Here is what it currently uses for authentication System.Net.CredentialCache.DefaultCredentials This will get credentials of the user ...

How to get LastActivityDate when using Active Directory Setup in a .net application

Hi, I have a requirement to show a list of all users along with the Last Activity Date. The application is .Net based. I found the MemberShip class provides the Last Activity date. However, this does not work when the MemberShip provider is ActiveDirectory Link to MSDN page because the ActiveDirectoryMemberShipUser does not implement th...