active-directory

How to find all groups in ActiveDirectory where the current user has WriteProperty access?

Currently i'd like to find all groups within the Active Directory where the current user has the right WriteProperty. The problem is that i can find all groups where the user directly is inserted, but when the user is within a group and that group has write access it won't show up. I thought that setting the booleans of GetAccessRules()...

[SharePoint] - Security based on 2 Active Directory groups

Hi all Let's say I have 2 AD security groups: "Access to SharePoint" and "Access to Archive". How do I set the security in this way on a SPWeb that only people who are member of both groups, are allowed access? Is this possible with out of the box AD tools? Thanks! ...

Active Directory validate service account and user accounts

Hello folks I have an issue here, I guess you all know what is AD service account and why it is used for, if not please see the below description ? SSL-Explorer requires a dedicated Active Directory account to use for authenticating AD users. This account serves as a link to your Active Directory database. If the Service Account is not...

active directory monitoring

I want to develop a monitoring tool to monitor active directory like (solar wind,op manager etc). For this purpose,I have chosen Zabbix(an open source tool) to monitor AD and provide me real time values so that i can plot those results on my Front-end. To monitor any process/service by zabbix, i need to provide its complete path to zabbi...

Active Directory Membership Provider - how to expand on this?

I'm working on getting an MVC app up and running via AD Membership Provider and I'm having some issues figuring this out. I have a base configuration setup and working when I login as [email protected] + password. <connectionStrings> <add name="MyConnString" connectionString="LDAP://domaincontroller/OU=Product Users,DC=my,DC=do...

MVC Authentication through WCF

In learning WCF, I'm a bit confused where to go to figure out how I should be handling user authentication. My MVC 2 app uses an Active Directory Membership Provider and this works and is good, but my MVC app doesn't really do anything but call my WCF services. My business logic on the other side of WCF is what really does everything (as...

Active Directory login - DirectoryEntry inconsistent exception

I need to validate the LDAP user by checking if there exists such a user name in the specified domain. For this I am using this code - DirectoryEntry entry = new DirectoryEntry("LDAP://" + strDomainController); DirectorySearcher searcher = new DirectorySearcher(entry); searcher.Filter = "SAMAccountName=" + strUserName; SearchResult res...

Connecting flex/php to Active Directory

Is there a way to connect my flex web application to Active Directory, and get the logged username? Right now we have a PHP script connected to the flex application, that gets user/pass input from the user and checks if there's such user in the AD, and that the password is correct. I don't want to ask for user/pass, but to make the appl...

How to query AD to get name email from lan id

I have some code in asp.net ( kindly given by someone else ) to query AD to get user name and email etc. using System.DirectoryServices; using System.DirectoryServices.ActiveDirectory; using ActiveDs; DirectorySearcher search = new DirectorySearcher(new DirectoryEntry(), string.Format("(samaccountname={0})", id)); if (s...

WIN32 Logon question

We have developed a ASP.NET 3.5 web application with Web Server 2008 and has implemented a custom authentication solution using active directory as the credentials store. Our front end application uses a normal login form to capture the user name and password and leverages the Win32 LogonUser method to authenticate the user’s credentials...

Why does Spring Security's BindAuthenticator require read permissions for users?

Hi all, I'm currently implementing/configuring the LDAP authentication of a Java web application using Spring Security 3.0. I'm using Microsoft AD LDS as LDAP server and chose the Spring's BindAuthenticator. I found out that the authentication only works if the authenticated user is a member of the partition's Readers role. The BindAuth...

keeping OpenLDAP and Active Directory in sync (windows server 08R2)

I've got a Windows Server box running AD, and a CentOS box running OpenLDAP in a mixed windows Linux network and I want to keep the two in sync. Preferably using free software/just some configuration changes. anyone know how to make these 2 authentication systems play nice? any syncing would have to be done over SSL for security reasons....

How do I set a Group Policy's Password Policy in C#

I am trying to retrieve a group policy from a Windows Server 2008 Active Directory and change the minimum password age, maximum password age, and minimum password length in a C# application. Is there a way to do this? So far I have only found out how to create new Group Policy objects using Interop.GPMGMTLib (gpmgmt.dll), yet I haven...

How to setup a development Active Directory

Does anyone have any suggestions on how to setup a development environment for active directory? We are thinking of using development.contoso.com or something along those lines that is a completely separate envnironment from our production. This will be used for things like Dev SharePoint and possibly a Dev exchange server. Maybe even...

RW access to shared Windows folder using different user credentials in .NET

We are working in Windows network (AD in use) We have folder shared by user (access limited for this user only) User credentials are known I need to access to that share inside my app. Note I've read about Impersonation but what I can do is open entire application in new user context (but what I need is working as currently logged use...

Active Directory LDAP - Lock User Account

What is the best way to use System.DirectoryServices.AccountManagement to lock an Active Directory user object? I'm able to determine if an account is locked using.. UserPrincipal principal = new UserPrincipal(context); bool locked = principal.IsAccountLockedOut(); How do I lock the account? Is there an alternative to doing something ...

LDAP/AD Integrated Group/Membership Management Package suitable for embedding in an application

In several web applications, it is often necessary to define groups of users for purposes of membership as well as role management. For example, in one of our applications we would like to user a group of "Network Engineers" and another group that consists of "Managers" of such Network Engineers. The information we need is contact de...

is it possible to run asp.net application in the context of an account of differnt domain

Hi, Suppose i work in a company ABC.com and another parent company domain XYZ.com. What must I do to run the ASP.net application hosted in a machine at ABC.com but use the windows credentials of XYZ.com? Thanks in advance ...

Vbscript - Creating a script that mirrors several sets of folders

Ok, this is my problem. I'm doing a logonscript that basically copies Microsoft Word templates from a serverpath on to a local path of each computer. This is done using a check for group membership. If MemberOf(ObjGroupDict, "g_group1") Then oShell.Run "%comspec% /c %LOGONSERVER%\SYSVOL\mydomain.com\scripts\ROBOCOPY \\server\Templa...

ASP.NET - Detect if user is authenticated with Active Directory?

We have a SSO solution with ADFS for logging into our web app, we also have standard setup that uses authentication with our database. I want to setup a solution that allows for both. So now I am trying to figure out, is there any way for ASP.NET to detect if a user is authenticated with Active Directory so I could do this on the fly? If...