Re: Add AD user to ADAM-group

Tech-Archive recommends: Fix windows errors by optimizing your registry

Ok. So i need to bind to the ad account, get the sid of that object, and at
last. Add the account as i normally would in adam, only using the ldap with
the sid-form instead?

"Lee Flight" wrote:

> Hi
>
> you need the SID of the AD user in either of the two SID string forms given
> in the MSDN link below. So if you are starting with an AD user name you
> will need to bind to that object in AD and retrieve the SID, if you google
> you might find some VBScript functions that will format the SID in the form
> you need.
>
> Lee Flight
>
>
> "pez" <pez@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:1B77A8E9-DB87-4E6E-9C54-47E119D09CA4@xxxxxxxxxxxxxxxx
> > How do I get this part(SID) right?
> >
> > memberPath ="LDAP://<SID=S-1-5-21-xxxxxx-yyyyy-zzzz>"
> >
> > Big thank you for your help
> >
> >
> > "Lee Flight" wrote:
> >
> >> Hi
> >>
> >> as the AD user is a Foreign Security Principal in ADAM you will
> >> need to add the AD user as a member in SID binding format:
> >>
> >> http://msdn.microsoft.com/library/en-us/adsi/adsi/iadsgroup_add.asp
> >>
> >> and that should create the required FSP if it does not exist already:
> >>
> >> groupPath = "LDAP://localhost:389/CN=Mygrp,OU=Groups,DC=Mydom,DC=com";
> >> memberPath ="LDAP://<SID=S-1-5-21-xxxxxx-yyyyy-zzzz>"
> >> Set objGroup = GetObject(groupPath)
> >> objGroup.Add(memberPath)
> >>
> >>
> >> Lee Flight
> >>
> >> "pez" <pez@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> >> news:97FC624B-57FF-496D-96EC-300A39CA97D1@xxxxxxxxxxxxxxxx
> >> > I'm trying to add an AD user to an ADAM group with vbscript but I can't
> >> > get
> >> > it to work. Anybody got an example of this?
> >> >
> >> > Thanks
> >>
> >>
> >>
>
>
>
.

Relevant Pages

  • Re: Binding images to mouseclicks
    ... bind $my_canvas { ... to the canvas itself and do your own intersection (and the intersection logic seems wrong unless ... use the bind sumcommand of the widget and bind directly to you item. ...   global sid ...
    (comp.lang.tcl)
  • Re: Add AD user to ADAM-group
    ... If you choose an AD user and substitute the string SID in the ... Add the account as i normally would in adam, ... >> Lee Flight ...
    (microsoft.public.windows.server.active_directory)
  • Re: RE : bind : zone file not found
    ... sid wrote: ... [SNIP] ... Otherwise bind is looking for ... To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list ...
    (Fedora)
  • Re: EFS Decryption Problem
    ... Was it only used to match up to the backed up userprofile, ... I thought the account's SID and password was involved in generating the ... a new account is created). ... instance of Windows would have a different SID even after restoring the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Update still failing with 80240020 and 8024000c
    ... There is still indication that the SID ... reporting because I think that ultimately it is going to be their accounts ... with the System account yesterday. ... In your case the System account would be ...
    (microsoft.public.windowsupdate)