Access AD from ASP

Hi stefri,

> Is there any settings on IIS to be applied?
An authentication method should be applied (basic or integrated..etc) the anonymous account won't have the privilieges to access the domain ad unless it is set to be a domain account.. security risk)

read:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/netdir/adsi/getting_started_with_asp_for_adsi.asp




<%
sLogonUser = Request.ServerVariables("Logon_User")
sDomain = Mid(sLogonUser, 1, Instr(1, sLogonUser, "\") - 1)
sLogonName = Mid(sLogonUser, Instr(1, sLogonUser, "\") + 1)

Response.Write GetUserFullName(sDomain, sLogonName)

Function GetUserFullName(sDomainName, sLogonName)
   On Error Resume Next
   
   Set oUser = GetObject("WinNT://" & sDomainName & "/" & sLogonName & ",user")
   GetUserFullName = oUser.FullName
   Set oUser = Nothing
   
   If Err <> 0 Then
       GetUserFullName = "User not found"
   End If
End Function
%>

-----------------------------------------------------------

' get a reference to that user (it's of data type IADSUser)
Set oUser = GetObject("WinNT://" & sDomainName & "/" & sLogonName & ",user")

' now, you can access its properties:
GetUserFullName = oUser.FullName

' listing the groups the user is in:
For Each oGroup in oUser.Groups
   Response.Write oGroup.Name & "<br>"
Next

-----------------------------------------------------------

Creating a user:

' Set up property values for the new user
sUsername =    "adsitester"
sFullName =    "ADSI Test Account"
sDescription = "A user account for testing ADSI"
sPassword =    "passworD2"

Set myComputer = GetObject("WinNT://servername")

' Create the new user account
Set newUser = myComputer.Create("user", sUsername)

' Set properties in the new user account
newUser.SetPassword sPassword
newUser.FullName = sFullName
newUser.Description = sDescription

newUser.SetInfo

-----------------------------------------------------------

Changing the password:

strMachine = "servername"
strUID = "username"
strPWDOld = "oldpwd"
strPWDNew = "newpwd"

Set objUser = GetObject("WinNT://" & strMachine & "/" & strUID & ",user")
objUser.ChangePassword(strPWDOld, strPWDNew)

-----------------------------------------------------------

The ADSI Scripting Reference is here: http://msdn.microsoft.com/library/default.asp?URL=/library/psdk/adsi/adsiscript_9lf0.htm



Cheers!

Silvers5
I cant rely on Request.ServerVariables("Logon_User") as my users might use Netscape from *nix* or from outside our company.
I am still looking for an out of the shelf solution as I have very few time left to offer my users the same features based on AD as Ex5.5 GAL.

Stefri
PS: the provided link is unfortunetely invalid

We have writen something similar (but with lot's more feature  than you ask.
We used ASP.NET and we put it to run on the DC since we didn't want to handle delegation of permissoins via another server.
It also allow users with the relevant permission (according to what is set in the AD) to modify the fields.

If you want this I'll need to remove the use of extra fields we added to the Schema, Remove some of the dropdown we added (some fields we wanted to enable only choosing from pull down (ie office)  and I'll post it to you.

Gady

Please post and leave the extra features... It can be always useful

Stefri

Gady,
Will you post your code in such a way I can close this post and award points
I have already a working soluton working using ASP and ADSI but yoour code can be interesting to study.
Stefri

could you mail it to qdcljq@hotmail.com? or cur and paste with separators such as:
'______ index.asp
code
'______ end index.asp


When back to office, I will post my code this way

Sefri

No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I will leave the following recommendation for this question in the Cleanup topic area:
    Delete - no points refunded

Any objections should be posted here in the next 4 days. After that time, the question will be closed.

hongjun
EE Cleanup Volunteer

Gady,
If you have some time to mail the code.zip to the email address provided above...
Stefri

Sent to your email, Good luck,

hongjun
Sorry for this. I shall know for next time
GMsb
Thanks, but now I understand why it would have been quite a job to post the code: 66 files!!
I post my solution tomorrow when bacl to office. This way, other particpants will be able to share the answer

Stefri

66 files, their relations.... is't not nice site to anyone.
Well if it's easier take back the points, I don't want to brake the rules nor to give you such a hard time.
Or maybe just post the 2 -3 code parts that the quesion talks about,
Search & Disply the list of employees.
The code contain much more than that,
It even contains parts to link to our own file server to show the picture of the employees.
and more