• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 266
  • Last Modified:

ActiveDirectory programming is not recurning anything

Hi folks.  We are trying to do some ActiveDirectory programming, see the code snip below.  The purpose is by entering a GroupName, we want to list the members of that group.  It works fine on local development machine with IIS running, but it returns nothing when we pushed it to the web server.  Any idea what is going on?  Thanks.

      protected void Page_Load(object sender, EventArgs e)

      private void GetMembers()
            DirectoryEntry ent = new DirectoryEntry("GC://cdc.gov/DC=cdc,DC=gov");
            DirectorySearcher srch = new DirectorySearcher(ent);
            srch.Filter = "(CN=DLS_Informatics_Team)"; //DLS_Informatics_Team: the group name.  Manually put in for development purposes.

            SearchResultCollection coll = srch.FindAll();

            ArrayList userNames = new ArrayList();
            foreach (SearchResult rs in coll)
               ResultPropertyCollection resultPropColl = rs.Properties;
               foreach (Object memberColl in resultPropColl["member"])
                  DirectoryEntry gpMemberEntry = new DirectoryEntry("LDAP://cdc.gov/" + memberColl);
                  System.DirectoryServices.PropertyCollection userProps = gpMemberEntry.Properties;
                  object obSam = userProps["sAMAccountName"].Value;
                  object obUserName = userProps["displayname"].Value;
                  if (obSam !=null)
                     Response.Write(obSam.ToString() + " - " + obUserName.ToString() + "<br>");
         catch (Exception ex)
1 Solution
There are 2 things that may have gone wrong here:
1). Web Server on different domain (less chances!)
2). The account that Website on web server is running under do not have enough permission to AD box

If it's the 2nd issue.. you can change the user the WebSite is running under from IIS > Website Properties > Directory Security. or you can directly type your password in web.config like following:

<identity impersonate="true" userName="[Domain\AdminAccount]" password="[password]" />
[in both cases you'll need to set the impersonation = 'true' in web.config for website]
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

7 new features that'll make your work life better

It’s our mission to create a product that solves the huge challenges you face at work every day. In case you missed it, here are 7 delightful things we've added recently to monday to make it even more awesome.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now