Re: Looking to verify users via Active Directory

"graymk" <graymk@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:6AE888EE-598B-4F19-A44E-28A263FC6EFF@xxxxxxxxxxxxxxxx


1. How do I verify a user is in a particular Group. I'll have an Admin
console form that will allow Admins to change the group if ever necessary.

The sample code I gave you will not help you at all.

I was only suggesting that you can get the current users *WINDOWS* logon
network name in code. Often some companies use a naming or logon scheme for
windows that parallels their active directory setup.


2. How do I search the Active directory? Specifically, if I give the name
John J. Doe or any part of it, how do I have All possible names returned
to
me?

Word, Excel, power-point, or access Are not really designed with an active
directory interface in mind.

So, this type of ability is certainly not built into a desktop program like
power-point, or access.

You have to use some type of interface that lets you connect to active
directory.

I believe you can actually use an ADO connection to test membership in
groups.
(I've never used, or done this before, so I can't help you lot in this
case).

However, yahoo search does come up with some coding examples that does speak
of this process via ADO:

http://codeidol.com/active-directory/actdir3/Using-ADO-for-Searching/The-First-Search/

Here is a sample that what use lets you test group membership

http://codeidol.com/active-directory/actdir3/Users-and-Groups/Evaluating-Group-Membership/

I think you'll have to go out and find some code examples. AD seems to be a
whole system of its own.

any VB6, or VBS script examples should be very easily to convert to the VBA
code. Their syntax and programming concepts When going from VB6 or the VBS
scripts to the VBA are really similar.

In addition you'll have to come up with some type of table or coding scheme
to say what form/report belongs to what membership. Let's assume that you
can successfully and easily query the active directory system, you still
have to find a way of saying that this particular sales report cannot be
viewed unless you're a member of the sales membership group -- the only
practical way you're going to do that is to write code to prevent the
form/report from opening (And further you'll need some efficient or
reasonable way to a store what report's belongs to what particular group.
You have to store that information somewhere, and code it after you figure a
way to query the ad system).

--
Albert D. Kallal (Access MVP)
Edmonton, Alberta Canada
pleaseNOOSpamKallal@xxxxxxx


.

Relevant Pages

  • Re: Grant Administrative Access to a Domain Controller
    ... Anyone with a good understanding of AD and Windows security will easily see ways of compromising the environment. ... Do not give enhanced rights to Domain Controllers to anyone you don't trust with Domain and/or Enterprise Admins. ... Just know that minimal access can be parlayed into even more access and try as you might, you cannot secure Active Directory from people with server operator or admin or several other levels of access rights on a DC. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Unlock acct permissions
    ... > "Active Directory Design and Deployment" ... > and which Joe referenced. ... >> These are some of the best books out there right now for AD Admin level ... How do I get DSACLS to run on a specific account? ...
    (microsoft.public.win2000.active_directory)
  • Re: Copy Active directory Users to a SQL DB table - Daily
    ... active users in Active Directory incl specified attributes 1,2,3..etc ... ' Connect to SQL Server database. ... I've used UserAccountControl to exclude ... the root, and all admin users in a custom adminOU in the root, a search done ...
    (microsoft.public.windows.server.scripting)
  • accessing membership DB from windows (not ASP) app
    ... our setup program. ... there is no way for an admin to get in our ... which database is the membership database (this step occurs when they created ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Unlock acct permissions
    ... "Active Directory Design and Deployment" ... and which Joe referenced. ... >>>Overall you appear to be a very "green" admin and you should buy one or more>>>books and learn this stuff before you do too much more. ... How do I get DSACLS to run on a specific account? ...
    (microsoft.public.win2000.active_directory)