I need my program to add all users selected in a checkedlist box to the local administrators group.I will be logged in as a domain admin when doing this , if soeone tries to run this without permissions it should prompt them for domain admin creds[code]...
View 1 RepliesI am using System.DirectoryServices.AccountManagement to try to add a local account to the local administrators group with the following code but am getting the error below on the group.Members.Add(usr) line. Both usr and group are created as objects and if I create a Test group, I can add the user to the Test group. I know the group object is the local administrators group and not the domain group because i changed the description on the local administratrors group and the group object is correct so it appears to be something specific to the local administrators group.
View 6 RepliesDoes anyone know how this can be done? The problem is that when you run the script to add a domain user to the local group as a local user you have no permissions to query the domain. Is there a way to pass a user name and password when doing this? [code]...
View 3 RepliesI'm in the process of writing a script for use in our lab. I need it to remotely add a domain user to the local group "Remote Desktop Users" on some remote desktop servers we use to bridge two subnets. The person adding the user would have admin rights for that remote server. I would use GPO, but we don't control the domain and it'd be damned near impossible to convince IT to set aside a OU for us with just those machines. I've been looking at using WMI in the script I've been working on but I haven't got the slightest clue how I'd implement it.
View 2 Repliesadd a domain user to a local group on remote computers
View 2 Repliesto add a windows user.The problem is i need to add the user to a group, but the groupnames are localized.E.g. the MS-example uses an english computer, which means you can get the guest group like this:
grp = AD.Children.Find("Guests", "group")
But on a non-english computer, the 'Guest' groupname is localized, meaning for example on my german language OS, the group name for Guests is "Gäste".Which means for the support example to run on my computer i need to change that line to
grp = AD.Children.Find("Gäste", "group")then it works.Now if the OS is any other language, how can I find the name for the guest user ?Or how can i get the guest user name from a sid ?
how to use directory services for listing the members of the local administrators group on a remote pc in the following format?
[Code]...
Dim Principal As New System.Security.Principal.WindowsPrinipal(New ystem.Security.Principal.WindowsIdentity(My.User.Name))I'm using My.User.Name in the example. I'm aware the My.User namespace has a IsInRole method, however, I well need to check a list of users and not just the current user so can't just use that or WindowsIdentity.GetCurrent. This exception is being thrown when declaring the Principal variable:"There are currently no logon servers available to service the logon request"
View 5 RepliesI have a function that works perfectly when I attempt to add a user from the same domain into a group of the same domain.
Function AddUserToGroup(ByVal strUserDN As String, ByVal strGroupDN As String, ByVal strGRPDC As String, ByVal strUserDC As String) As Boolean
Dim oUser As DirectoryEntry
[Code]....
The error is actually being thrown on the Invoke line, but as I said earlier, if the user is in the same domain, this works perfectly.
I know that using Dim currUser As String = Request.ServerVariables("LOGON_USER") retunrs the DomainUsername, but I want to know what Group that user is in say in Active Directory.
View 2 Repliesanyone have some quick code on how to do this?
wmi is not a option.
I wrote an ASP.NET web application. My application created a request with returning URL other e-commerce server. I want to get this.
[URL]
I used Request.Url.AbsoluteUri. But it's not OK for typing address by user.
Using WMI is it possible to associate a custom group with a builtin group of which it is a member. For example: I've created a group called "recovery admins", and added this group as a member of domain admins. When I enumerate the members of domain admins using WMI the "recovery admins" group is not identified If I use the WMI CIM studio to browse the WMI tree or run queries the "recovery admins" group does not appear to be in any way associated with the domain admins group.
View 3 Repliesi need to check if my Computer is connected with an Active Directory Domain or only in a Workgroup. Is this possible?
View 4 RepliesOur company is developing software projects that use a users windows username/password for program authentication. Our programs encrypt the username /password, send them to a web service. The web service decrypts the username/password and authenticates the user against our LDAP using the System.DirectoryServices namespace. This works well. There are two methods, one that validates the user and passes back the user's LDAP info in a datatable, the other passes back a boolean that indicates the user is on the domain. This is working just fine. Over the 4th of July weekend, our domain server hung. While it slowed down the login process for windows while it re-routed to a secondary domain server across the country, all our programs could not validate the users because our local domain controller was down.So I have been asked to update the web services to include a list of domain controllers that can be used if the local one is not available. Below is a snippet of code I use to validate a user:
[code]...
The getinfo function uses the directory services to create an LDAP entry, then do a search based on the account name (windows username) and populates properties for common LDAP information. How can I extend this function, or re-write it, to run down a list of domain controllers found on the network to validate a username? I was thinking of putting the domain in a database, but that requires administration as they change. Is there a way to cycle through the local domain controllers listed on the machine?
I'm trying to match up a specific group name and see if it exists for the currently logged in user using Active Directory roles. If the Group Name exists for the Current User, I want that group name to be displayed in a drop down list. Example: If current user is in BIG Group, display BIG in drop down list.Problem: All I am getting is SIDs and I'm not able to get anything to match up to the group name and nothing will show up in the drop down list.I also get the following Error:Error: Object variable or WIth block variable not set.How do I fix this?? here is the code I am using:
Private Sub GetMarketingCompanies()
' code to populate marketing company drop down list based on the current logged in users active directory group that
[code].....
Enumerate if an Active Directory group's member is user or another group
View 1 RepliesI'm trying to view the users of a local group on my machine so I can eventually change their read/write permissions... what code can i use to display the users?
View 1 RepliesI want to be able to get and set values of Local Policy Editor using vb scripts (or for that matter any other command line thing). The problem is that for my requirement I cannot rely on the machine in question having anything like powershell. I want to be able to run a script/command and get/set the values of things inside Local Group Policy Editor.
eg. I want to be able to set things like running gpedit.msc and set the value for "\Computer ConfigurationAdministrative TemplatesNetworkOffline FilesDefault Cache Size", and I want to do this without manual intervention.
I am trying to create a data entry system for a local community group. I am working with VB.NET 2010 and MSAcess 2000. I am completely new to using a DB in VB.Net. I have created a form with the membership table bound as details on the form and the classes they are attending as a DataGridView. I used all the Visual Studio GUI tools for this. It was reasonably straightforward once I got the hang of things. My problems arise when I try to ensure that a user cannot move to a new record or create a new member without first saving any changes they have made.
I am using ColumnChanging events in the ...DataSet.vb class to set flags to indicate whether any data values have been changed on the form. My problem is that the ColumnChanging events for the classes DGV fire immediately on changing the data whereas the ones for the member details don't fire until I start to move to a new record. I don't know if it is important but my member navigation is achieved by means of a combobox on the form that lists the member names from the table. I have absolutely no idea why this works - it just did; the form updates as soon as the user selects a new member in the combo box.
The following steps give a Guest shutdown policy.
1- Click run, and type the gpedit.msc, to start "Local Group Policy Editor".
2 -Expand "Computer Configuration" -> "Windows Settings" -> "Security Settings" -> "Local Policies" -> Then click "User Rights Assignment".
3- In the Policy window, Select "Force shutdown from a remote system", double click it, it will pop a properties window.
4- Click "Add user or group button", add a user and name it Guest.
I need to know if it's possible to manipulate and add the user or group programmatically. I'm using Visual Basic 2008.
I use a simple application on a client in our domain. When i open the application as admin-user all works fine.When a domain-user with no special rights open the application theres is the following error message[code]...
View 1 RepliesI have a users domain and user id. I would like to retrieve the full user name. The data is coming from a SQL table for display onto an asp.net page. Anyone know how to get the users name for someone other then the user who is using the asp.net application?
View 2 RepliesI am writting an application in VB 2008. The application will reside on a 'Manufacturing Workstaion'. The workstation is assigned a user ID of Prodxx. Once the workstation is booted up and the application is running the 'Operator" must login to the application. The users who login to the app must have a valid account on the domain. I need to validate the individual users against the domain security. Many Users will login and logout during the day.
View 2 RepliesHow do I search all the user accounts in a domain in .NET? Not the computer names in the domain, but the user accounts, that's what you are using to log on Windows.
View 3 RepliesI have a question. I'm deploying my VB app that performs some task VIA SCCM. The application is run with the NTAuthoritySystem account.
I would like to copy a log file to a server all domain users/computer can right to this folder. I'm trying to get a log copied to the server but since it's running as the system account it can't authenticate to the share to save the log file on XP machines.
Can somebody show me example code of how to save a file as a different user when running the program with the system account . Would this be secure to use a domain account to impersonate and save the file?
we have a script which we use here to output a list of all the groups a user belongs to (for records before deletion) and it works fine for the first domain, but any sub domain are not searched. (due to "LDAP://rootDSE" I think)here is our current script
On Error Resume Next
Const ForWriting = 2
UserName = InputBox("Enter Username","Enter Username")
[code]....
I want the script to search through all domains and sub-domains it can find until it finds the user, or runs out of domains to search. Once found, it then dumps the groups to a file (like it does now)
i am looking for information on how to get the current active directory users name? Basically i have a recording package program and some of the users have expressed the want to have it track who is entering which notes. So when a note is saved the program will take a look at who is currently logged into the computer and save it to the database. I have found how to do this for mac address, computer name and ip address but have not found anything yet for getting current logged on user.
View 4 RepliesI understand how to find a user using the exact LDAP url
LDAP://domain/CN=Username,OU=Users,DC=domain,DC=com
but what if I need to find a user without looking in the particular OU. How do I search the entire domain?
I am putting together an old post here with this new one. My main goal is to combine these two portions so that the search does not need to be ran on each and every computer.
[Code]...
I can set the path as WinNT://domain.name/username...and I get a list of something, are they files? i am not sure? Second portion of code searches the computer for the java.exe to display its version, as well as searching for any indication of a java file on that computer.
[Code]...