Re: Manage Group Membership via Custom Web App?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Actually, our book is from 2006 and only covers .NET 1.x and 2.0. Ethan
Wilansky and I have an article coming out in MSDN magazine in January that
discusses the new .NET 3.5 stuff (there are no interesting LDAP changes in
..NET 3.0), but I doubt we'll get an opportunity to update the book with that
stuff.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"Scott Townsend" <scooter133@xxxxxxxxxxxxxxxx> wrote in message
news:73F41291-29C9-4EE8-BFED-137A85D2FD63@xxxxxxxxxxxxxxxx
It would be nice to be able to move to the latest Technology! I can
hardly keep my web developers from still using FrontPage2003... We
finally got them to convert 1/2 the intranet site over to .Net, though its
only .Net 2.0 )-;

So Does your book only cover v3 and v3.5 or would it be helpful for a .net
2 environment?

Since the code we have now runs under the context of the user logged in,
I'm guessing that the users that would have access to the screens that
would populate the groups for the users would have to have the AD
Permissions. Hmmm...

Thanks,
Scott<-


"Joe Kaplan" <joseph.e.kaplan@xxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:OBvSd$IIIHA.1324@xxxxxxxxxxxxxxxxxxxxxxx
Sure, people do this all the time. I wrote a book about this kind of
stuff (see link in sig). :)

The question is kind of open-ended, so I'm not sure exactly what to tell
you, but there are a variety of ways of doing this. .NET 3.5 adds some
really nice new functionality with
System.DirectoryServices.AccountManagement that greatly simplifies all of
the security principal management stuff as well, so it is worth looking
seriously at if you want to build something custom.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services
Programming"
http://www.directoryprogramming.net
--
"Scott Townsend" <scooter133@xxxxxxxxxxxxxxxx> wrote in message
news:C4070DB5-68A5-4A5A-A3FE-6E1968D51F2D@xxxxxxxxxxxxxxxx
We have just gone though a rebuild of 30 users in Active Directory. We
didn't have a backup and had to re-create all the users manually. So all
of the user's group memberships have been lost.

Management wants me to develop a way for the HR staff to Assign users to
specific management groups with then will automatically add them to a
set of groups in Active Directory.

It would be great if I could just do this in .Net on the Fly as they hit
the Submit button. Though Since the user would need permissions to add
to AD, the HR people do not have that permission. We could run a SSIS
job on our SQL server that could do it.

Is there a way to Programmatically add a user to a group in AD via a web
in .Net?


Thanks,
Scott<-





.

Relevant Pages

  • Re: Manage Group Membership via Custom Web App?
    ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... Management wants me to develop a way for the HR staff to Assign users to ... Though Since the user would need permissions to add to ...
    (microsoft.public.windows.server.active_directory)
  • Re: Implication of using the Manager attrib to the User Obj
    ... If he did not delegate the permissions by container, he would instead be delegating permissions to individual objects. ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... And, depending on the technical background the managers have, it may be foolish to even think that it would be reasonable for account management to be based on organizational hierarchy. ...
    (microsoft.public.windows.server.security)
  • Re: Web Single Sign On
    ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... current Windows credentials to the server, ... This common identity is the user's username used to logon to the ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Changing ADAM user password
    ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... Running the bind from another W2K3SP1 machine ... support in digest or something like that. ...
    (microsoft.public.windows.server.active_directory)
  • Re: ASP.NET 2.0 WindowsTokenRoleProvider Local Groups Broken
    ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... There is no Group property on the WindowsIdentity object in .NET 2.0, ...
    (microsoft.public.dotnet.framework.aspnet.security)