active-directory

Edit User Account on SharePoint Server 2010/Project Server 2010 without AD

We have installed SharePoint Server 2010 and Project Server 2010 without AD. We're a disconnected bunch and thought we'd take it for a spin since being part of BizSpark. But now I'm seeing an issue with editing user account info like email address. Can anyone give me some hints on how life might be like without AD or how to supplement...

cannot create new object in ActiveDirectory

Hi. I'm trying to add new object to existing organisational unit in Active Directory. Following code is used to do this. It runs without errors. But new object is not created after this. Please advise what I'm doing wrong here. using System.DirectoryServices; using System.DirectoryServices.ActiveDirectory; namespace TestAdObjectCre...

Impersonation in asp.net, confused about implmentation when used with Active Directory & Sql Server

I have an internal website that is using integrated windows authentication and this website uses sql server & active directory queries via the System.Directory.Services namespace. To use the System.Directory.Services namespace in ASP.NET I have to run IIS under an account that has the correct privileges and importantly have impersonatio...

Security for a web app through Active Directory

Hi All, Here is a situation I am currently addressing. I am working on a Web project with its security being tied up with the Active Directory. Which means technically when you add a user through the application we are adding a new user to the Active Directory on the Server. Now my question is, is this a good practise? At this ...

ASP.Net Membership AD, get Organization Unit

How can I get Organization Unit (OU) from ActiveDirectory when using ASP.Net Membership? I can't find any possible mappings for web.config and there is nothing like that in User.Identity. ...

Acquiring AD OU list.

Hi, I am looking to be able to pull a list of current OU's from Active Directory I have been looking at some example code online for sometime, but O don't seem to be able to get this to work. string defaultNamingContext; DirectoryEntry rootDSE = new DirectoryEntry("LDAP://RootDSE"); defaultNamingContext = rootDS...

Is this a possible way to get Drupal AD SSO?

I'm currently building a Drupal website in an Active Directory environment. One of the site's requirements is Single Sign On, which to date seems to be impossible because there is no Kerberos SPNEGO/GSSAPI auth module for drupal. I've come up with an idea on how SSO could be attempted on IIS. Since IIS has the option to require Kerberos ...

Determine the maximum password age in Active Directory

I want to expire users' passwords on an individual basis in Microsoft Active directory at different times. I understand that each user within AD does not have it's own password expry time. Instead there is a Maximum Password Age associated with the domain, and a LastPasswordSet date associated with the user. I intend to set the LastPas...

Setting the LastPasswordSet date for a user in Active Directory

I want to set the LastPasswordSet attribute of a user in Microsoft Active Directory. The .NET UserPrincipal API exposes the LastPasswordSet property as readonly. Is there a way around this, to set the value (perhaps using ADSI)? Edit: MSDN provides the following example code: usr.Properties["pwdLastSet"].Value = -1; // To turn on, ...

Active Directory List OU's

I have this code currently, string defaultNamingContext; DirectoryEntry rootDSE = new DirectoryEntry("LDAP://RootDSE"); defaultNamingContext = rootDSE.Properties["defaultNamingContext"].Value.ToString(); rootDSE = new DirectoryEntry("LDAP://" + defaultNamingContext); //DirectoryEntry domain = new...

Tomcat 6 Realm Config with Windows AD

We have Tomcat 6 connecting to a Win2k3 Server running AD. The realm is configured as such <Realm className="org.apache.catalina.realm.JNDIRealm" debug="99" referrals="follow" connectionURL="<url>" connectionName="CN=Query Account,OU=Service Accounts,DC=company,DC=com" connectionPassword="<pwd>" userBase="OU=Users,DC=com...

Good sites for learning Active Directory Operations

Hi Could anybody help me to list Some Good Sites that are describing about Complete AD Operations. thanks in advance. ...

LDAP Query for OU's

Sorry for being an uber pain people, its all very new :( Already had alot of help on this, but don't seem to be able to see the problem, I am trying to populate a combo box with a list of all the current OU's, later to send each machine within that OU a shutdown command. (Acquiring AD OU list & Active Directory list OU's) were my previo...

ADO program to list members of a large group.

Hi everyone, I'm attempting to list all the members in a Active Directory group using ADO. The problem I have is that many of these groups have over 1500 members and ADSI cannot handle more than 1500 items in a multi-valued attribute. Fortunately I came across Richard Muller's wonderful VBScript that handles more than 1500 members at ht...

Get machine name from Active Directory

I have performed an "LDAP://" query to get a list of computers within a specified OU, my issue is not being able to collect just the computer "name" or even "cn". DirectoryEntry toShutdown = new DirectoryEntry("LDAP://" + comboBox1.Text.ToString()); DirectorySearcher machineSearch = new DirectorySearcher(toShutdown); ...

Personal directories on file server for each user in AD

I want to make a home directory for each user of every group in AD using a batch script. the users personal directories (my documents, ...) should be stored in there as well. the path should be as following: \Fileserver{group name}{user name} can someone give me some pointers on how to achieve this? ...

Encrypt shared files on AD Domain.

Can I encrypt shared files on windows server and allow only authenticated domain users have access to these files? The scenario as follows: I have a software development company, and I would like to protect my source code from being copied by my programmers. One problem is that some programmers use their own laptops to developing the ...

PHP - ldap_search() filter. How to search for user

$_SERVER['REMOTE_USER'] returns the username of the user logged in to an Active Directory. I want to retrive this users info by using ldap_search(). This is what I have now: $ad = // ldap_connection id $filter = "(|(sn=$username*)(givenname=$username*))"; $attr = array("displayname", "mail", "mobile", "homephone", "telephonenumber", "s...

Log a user in to an ASP.net application using Windows Authentication without using Windows Authentication?

I have an ASP.net application I'm developing authentication for. I am using an existing cookie-based log on system to log users in to the system. The application runs as an anonymous account and then checks the cookie when the user wants to do something restricted. This is working fine. However, there is one caveat: I've been told th...

Authenticating to multiple OUs in Active Directory

I'm using the Active Directory Membership Provider with the following configuration: <connectionStrings> <add name="MyConnString" connectionString="LDAP://domaincontroller/OU=Product Users,DC=my,DC=domain,DC=com" /> </connectionStrings> <membership defaultProvider="MyProvider"> <providers> <clear /> <...