Re: Get currently logged in user's ojectGUID

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

"MuZZy" <tnr@xxxxxxxxxxxxxxxxx> wrote in message news:%23Sury$kaHHA.4008@xxxxxxxxxxxxxxxxxxxxxxx
Willy Denoyette [MVP] wrote:
"MuZZy" <tnr@xxxxxxxxxxxxxxxxx> wrote in message news:O2qy1UZaHHA.4940@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

I am looking to find a way to get currently logged in user's object GUID without querying ActiveDirectory. For example, when i log in to my laptop from home, I'm not on the office network so i can't reach AD but I'm sure i still can get my AD's objectGUID, as the profile is cached locally.

Any ideas?

Thank you,
Andrey


No, the objectGUID is not part of the profile, so, not cached locally, don't know why you need this objectGUID anyway.

Willy.

I can explain why do i need it - maybe you can give me a better advice.
Our application currently supports its own set of application users/logins, but it becomes a problem for our bigger clients who want all of their software to be "One click login" so that once you are logged in to Windows, you have access to all apps without need to login again using those apps' logins. Like in SQL server you can login using sql account or using windows authentication.


Not sure what do you mean by this? SQL server and Windows authentication are different beasts!

So i want to add mapping of existing application accounts to Active Directory users, for that i need some user's ID which is reliable and which doesn't change if user is say renamed (that's why i can't use principal name for that). SO my idea was to use either GUID or SID, but as i understand SID can change, but GUID will never change.

GUID, and objectSID's don't change by renaming an object, anyway,authentication (in an AD realm) doesn't use objectGUID's or GUID's or SID, authentication uses kerberos tickets obtained by a login (specifying login credentials). A kerberos ticket is cached localy and is valid for a configurable period only, after which it can't be used any longer.


In case if the user is currently not on the network i still need to be able to authenticate him that's why i need something i can query locally, without access to AD.

I guess, i will go with SID then...


I'm not quite clear on what you mean in your last paragraph, if the user is not on the network, how do you access network resources? or what do you need to authenticate the user for?

Willy.





.

Relevant Pages

  • Re: Get currently logged in users ojectGUID
    ... I am looking to find a way to get currently logged in user's object GUID without querying ActiveDirectory. ... For example, when i log in to my laptop from home, I'm not on the office network so i can't reach AD but I'm sure i still can get my AD's objectGUID, as the profile is cached locally. ... Our application currently supports its own set of application users/logins, but it becomes a problem for our bigger clients who want all of their software to be "One click login" so that once you are logged in to Windows, you have access to all apps without need to login again using those apps' logins. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Get currently logged in users ojectGUID
    ... For example, when i log in to my laptop from home, I'm not on the office network so i can't reach AD but I'm sure i still can get my AD's objectGUID, as the profile is cached locally. ... Our application currently supports its own set of application users/logins, but it becomes a problem for our bigger clients who want all of their software to be "One click login" so that once you are logged in to Windows, you have access to all apps without need to login again using those apps' logins. ... Like in SQL server you can login using sql account or using windows authentication. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: How to get hashed password of current user
    ... If you want their SID, ... will also work for domain users as well. ... password too (this is very easy with Basic authentication), ... If so, objectGUID and objectSID are ...
    (microsoft.public.dotnet.security)
  • Re: How can I access more properties of the AD Acount
    ... The Guid structure in .NET does all of the heavy lifting for you. ... When you read the objectGUID from AD has byte array, ...
    (microsoft.public.dotnet.security)
  • Re: How can I access more properties of the AD Acount
    ... each byte is converted into a hex string of two letters and gets an ... >I found some help on converting the objectGUID Attribute of an AD Object to ... > GUID through the GUID Structure in .NET Framework but when i try to search ...
    (microsoft.public.dotnet.security)