Link to home
Start Free TrialLog in
Avatar of David Smithstein
David SmithsteinFlag for United States of America

asked on

How can I create a table from Active Directory using VBA and MS Access

The code below seems to run without error,  on a domain computer, but nothing happens.

I need a little help getting the data into a temporary table I can use for the needed feature.  I have button that runs this function, and I get a message on a non-domain computer that a domain could not be contacted, and nothing happens on the domain computer.

Basically I would like to access First Name, Last Name, username, email, etc. from AD and compare that to the same information in my app, to support importing new users to my app where employee information is also maintained.

The end result will be a button that will compare the app employee data with AD data, alert the user there are x number of new AD users, and/or x number of users no longer in AD and then facilitate the addition/removal.

All I need help with is making the AD connection and accessing the data there.  The app will also potentially be used by users who have multiple domain memberships.  Am I inherently limited to information of the domain the computer/user is currently logged into?

Thanks!
David

Public Function ActDirConnect()
On Error GoTo Err_ActDirConnect

   
 Dim adoConnection, strBase, strFilter, strAttributes
 Dim objRootDSE, strDNSDomain, strQuery, adoRecordset, strName, strCN

 ' Setup ADO objects.
 Set adoConnection = CreateObject("ADODB.Connection")
 adoConnection.Provider = "ADsDSOObject"
 adoConnection.OPEN "Active Directory Provider"
 Set adoRecordset = CreateObject("ADODB.Recordset")
 Set adoRecordset.ActiveConnection = adoConnection

 ' Search entire Active Directory domain.
 Set objRootDSE = GetObject("LDAP://RootDSE")
 strDNSDomain = objRootDSE.Get("defaultNamingContext")
 strBase = "<LDAP://" & strDNSDomain & ">"

 ' Filter on user objects.
 strFilter = "(&(objectCategory=person)(objectClass=user))"

 ' Comma delimited list of attribute values to retrieve.
 strAttributes = "sAMAccountName,cn"

 ' Construct the LDAP syntax query.
 strQuery = strBase & ";" & strFilter & ";" & strAttributes & ";subtree"

 ' Run the query.
 adoRecordset.Source = strQuery
 adoRecordset.OPEN

 ' Enumerate the resulting recordset.
 Do Until adoRecordset.EOF
     ' Retrieve values and display.
     strName = adoRecordset.Fields("sAMAccountName").Value
     strCN = adoRecordset.Fields("cn").Value
     'Wscript.Echo "NT Name: " & strName & ", Common Name: " & strCN
     ' Move to the next record in the recordset.
     adoRecordset.MoveNext
 Loop

 ' Clean up.
 adoRecordset.Close
 adoConnection.Close
    
    
    
    
    
Exit_ActDirConnect:
    Exit Function

Err_ActDirConnect:
    MsgBox Err.Description & " - ActDirConnect error"
   
    Resume Exit_ActDirConnect
End Function

Open in new window

Avatar of Neil Russell
Neil Russell
Flag of United Kingdom of Great Britain and Northern Ireland image

An a non domain computer it can NOT work as it tries to talk to the domain....

On a domain computer it works perfectly. It connects, queries, gets data and loops through records. Thing is you have not asked it to do anything with the data.

Run through the code in debug mode pressing F8 on each line and watch...
Avatar of David Smithstein

ASKER

The message on the non domain computer was expected, the part I need help with is how to ask it to do something with the data, like create or update a table in MS Access.

I'm also not sure how to ask for the specific fields available in active directory.  What code am I missing to do that?

Does adoRecordset.OPEN give me access to the AD Data?  Or should I make an access query that populates my local table within the Do Loop?  Does anyone know a good reference for AD fields besides sAMAccountName and cn referenced in this code so I know how to ask for the fields I want?

Thanks,
David
ASKER CERTIFIED SOLUTION
Avatar of Scott McDaniel (EE MVE )
Scott McDaniel (EE MVE )
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks!  I was just unsure if that code was supposed to produce a result I couldn't see.  I added a local table and few queries, one to clean it out, the other to append the user field as it cycled through obtaining the cn(user) data, and a third to display the results.  - Worked perfectly.  Now I just need the client to tell me what AD info we need to be working with based on your link, and we are all set. - Thanks again!