adsi

2 line Active Directory call fails for offshore contractors using VPN to connect to our company network.

we have offshore contractors that are tryingt o run an app that performs the following Active Directory call, shown below in VB.NET Dim objRootDSE As New DirectoryEntry("LDAP://RootDSE") Return "GC://" & Replace(Replace(objRootDSE.Properties("rootDomainNamingContext").Value().ToString, ",", "."), "DC=", "") 'DC=uis,DC=unisys,DC=com ...

Find Users E-Mail via SID using VBScript and Active Directory

Hi, I am parsing log messages about changes to user accounts on a windows system. I want to notify the user about the changes so I need to retrieve their personal information (First,Last, E-Mail) from Active Directory. I already found a way to retrieve the username but that is only via WMI and not ADSI: Function FindUser(Message) ...

With ADSI SetPassword method how a password is transmited to AD Server

My question is how ADSI performs SetPassword operation. According to what I have read ADSI is a COM interface and it has more capabilities than AD provides through LDAP. While you are suppose to update unicodePwd attribute of a personaccount entity through LDAP, ADSI provides you SetPassword call. I know that ADSI & AD provides Kerberos ...

Active directory logonCount is 0, though the user has logged in

For a user in active directory, the properties hold values for lastlogontime & lastlogontimestamp but the logoncount is 0. I am having only one domain controller in that domain. I found from surfing, that logonCount value of 0 indicates that the value is unknown. But I am totally confused with why it is unknown. Is that an issue with A...

.NET - What is the best library for inspecting and controling Windows Services?

Hi, I need to monitor and control a set of Windows Services that are running either on a local machine or remotely. I've heard of WMI and ADSI and the first one seems to do what I want. Before going deep into it, I just want to check if I'm going in the right direction? Thank you EDIT Additional information: I also need to inspect SQ...

Creating an IIS 6 Virtual Directory with PowerShell v2 over WMI/ADSI

I can create an IISWebVirtualDir or IISWebVirtualDirSetting with WMI, but I've found no way to turn the virtual directory into an IIS Application. The virtual directory wants an AppFriendlyName and a Path. That's easy because they're part of the ...Setting object. But in order to turn the virtual directory into an App, you need to set Ap...

Setting the LastPasswordSet date for a user in Active Directory

I want to set the LastPasswordSet attribute of a user in Microsoft Active Directory. The .NET UserPrincipal API exposes the LastPasswordSet property as readonly. Is there a way around this, to set the value (perhaps using ADSI)? Edit: MSDN provides the following example code: usr.Properties["pwdLastSet"].Value = -1; // To turn on, ...

Creating an HTTP-Redirected Virtual Directopry in IIS 6.0 without specifying physical path & WMI/ADSI?

My question is : Is it possible to create a working IIS 6.0 Virtual Directory with providing Physical Path of the Virtual Directory.? I know that manually, it is not possible via IIS but programmatically such a virtual directory can be created. If an HTTPRedirect is set on that virtual directory but the site physical path is not specifi...

What is better for non-active directory stuff, WMI or ADSI?

I've used both technologies in C# for some time now and thus far have not been able to figure out which is better (in terms of ease of use). It seems to me that because there is support for Windows 95 in WMI, it's an older technology than ADSI (which I assume was invented along with Active Directory). However, despite the hint that ADSI ...

Windows Server 2008 R2: ASP queries to IIS fail with UAC enabled

I have some ASP code that creates a virtual directory in IIS. However, when running on IIS7 in Windows Server 2008 R2, the call to GetObject fails with "permission denied". This only occurs when UAC is enabled; the entire process works perfectly if UAC is disabled. Set objIIS = GetObject("IIS://localhost/W3SVC/" & siteNumber & "/Root"...

How can I optimize my PowerShell - LDAP Query?

Hey guys, this one is out there for the PS gurus. I've created a script that reads from a CSV (or other dataset, but not posting that side) and creates users in my AD environment. Basically, whatever dataset is passed into the script will be processed, and then a user will be created if they do not exist. If the user exists in the AD al...

ADSI Editor problem

I had an exchange 2007 server in my organization suffer a catostrophic failure and was unrecoverable. I have installed a new Exchange 2007 server and as i expected, the old defunct server still shows up in the hub transport. I am trying to use ADSI to to remove it which I believe generally works, but for some reason on this system will...

Is there a better way to check for Virtual Directory and if not, Create it?

Hi All, I have some vbscript code I use to set paths to virtual directories when a developer switches his/her environment to work on another project. Currently, we try to set the path, and if there's an error, we create it. It just smells funny. Is there a way to check if a Virtual Directory exists? And if not, create it? set objIIS = ...

Active Directory user password expiration date .net /OU Group Policy

Hello, I have searched the site for information and found this: http://stackoverflow.com/questions/1362977/asp-net-c-active-directory-see-how-long-before-a-users-password-expires which explains how to get the value of when the password expires as per Domain Policy. My question is this: what if the user has an OU Group Policy that has a...

How can I use Perl to test for Win32 group membership when group contains nested groups?

I'm trying to use Perl to determine if a Windows users is a member of a Windows group, if the the group contains nested groups. I've tried using Win32::NetAdmin::GroupIsMember(), but it only works if the user a direct member of the group. I'm not a AD or LDAP expert, but the examples I googled for exhibit the same behavior. For exampl...

Trying to create a new Active Directory user, Invoke("SetPassword",pwd) throws "The RPC server is unavailable"

I'm trying to create a new user on my development active directory server using .NET System.DirectoryServices namespace. I try using the following code: DirectoryEntry dirEntry = new DirectoryEntry(path, "TESTDOM\\Administrator", "2109password", AuthenticationTypes.Secure | AuthenticationTypes.ServerBind); object o = dirEntry.NativeOb...