Add Domain User To Local Group While Logged In As Local Account?
Sep 15, 2010
Does anyone know how this can be done? The problem is that when you run the script to add a domain user to the local group as a local user you have no permissions to query the domain. Is there a way to pass a user name and password when doing this? [code]...
I need my program to add all users selected in a checkedlist box to the local administrators group.I will be logged in as a domain admin when doing this , if soeone tries to run this without permissions it should prompt them for domain admin creds[code]...
I'm in the process of writing a script for use in our lab. I need it to remotely add a domain user to the local group "Remote Desktop Users" on some remote desktop servers we use to bridge two subnets. The person adding the user would have admin rights for that remote server. I would use GPO, but we don't control the domain and it'd be damned near impossible to convince IT to set aside a OU for us with just those machines. I've been looking at using WMI in the script I've been working on but I haven't got the slightest clue how I'd implement it.
I am using System.DirectoryServices.AccountManagement to try to add a local account to the local administrators group with the following code but am getting the error below on the group.Members.Add(usr) line. Both usr and group are created as objects and if I create a Test group, I can add the user to the Test group. I know the group object is the local administrators group and not the domain group because i changed the description on the local administratrors group and the group object is correct so it appears to be something specific to the local administrators group.
I have a function that works perfectly when I attempt to add a user from the same domain into a group of the same domain.
Function AddUserToGroup(ByVal strUserDN As String, ByVal strGroupDN As String, ByVal strGRPDC As String, ByVal strUserDC As String) As Boolean Dim oUser As DirectoryEntry
[Code]....
The error is actually being thrown on the Invoke line, but as I said earlier, if the user is in the same domain, this works perfectly.
I have a Windows service running on Local System Account. The service connects to a remote webservice, and donwloads a file.Now I installed the service in an environment with a proxy server (http://proxy:80"). The result is that in the eventlog I get error:"unable to connect to remote server". When I start the service with a (test) account, everything works fine.Can someone tell me how I can handle a proxy environment with a service running under local system account?
I've a service running under Windows Server 2008R2. I'm using the system.IO to do some copying & deletion of files and directories.This is working fine as long the service is using an user account. If I set the selection to 'Local system account' then it is not possible anymore to delete or copy files.
I have computers joined to a domain. I'm writing a desktop application that ask for a username and password to authenticate user against Active Directory.Sometimes, user uses this application on the computer that is not joined to the domain.I'm using .NET 3.5, System.DirectoryServices, and System.DirectoryServices.AccountManagement. Code sample how to authenticate users:
Private Function ValidateExternalUser(ByVal username As String, ByVal password As String) As Boolean Using context As PrincipalContext = New PrincipalContext(ContextType.Domain, "your_domain_here") Return context.ValidateCredentials(username, password, ContextOptions.Negotiate)
[code]....
I want to know how to check if user is already logged in on domain computer, then I don't have to ask them log into the application again.
Update:If it can't be done with System.DirectoryServices.AccountManagemen, is there any way to do it?
Our company is developing software projects that use a users windows username/password for program authentication. Our programs encrypt the username /password, send them to a web service. The web service decrypts the username/password and authenticates the user against our LDAP using the System.DirectoryServices namespace. This works well. There are two methods, one that validates the user and passes back the user's LDAP info in a datatable, the other passes back a boolean that indicates the user is on the domain. This is working just fine. Over the 4th of July weekend, our domain server hung. While it slowed down the login process for windows while it re-routed to a secondary domain server across the country, all our programs could not validate the users because our local domain controller was down.So I have been asked to update the web services to include a list of domain controllers that can be used if the local one is not available. Below is a snippet of code I use to validate a user:
[code]...
The getinfo function uses the directory services to create an LDAP entry, then do a search based on the account name (windows username) and populates properties for common LDAP information. How can I extend this function, or re-write it, to run down a list of domain controllers found on the network to validate a username? I was thinking of putting the domain in a database, but that requires administration as they change. Is there a way to cycle through the local domain controllers listed on the machine?
to add a windows user.The problem is i need to add the user to a group, but the groupnames are localized.E.g. the MS-example uses an english computer, which means you can get the guest group like this:
grp = AD.Children.Find("Guests", "group")
But on a non-english computer, the 'Guest' groupname is localized, meaning for example on my german language OS, the group name for Guests is "Gäste".Which means for the support example to run on my computer i need to change that line to
grp = AD.Children.Find("Gäste", "group")then it works.Now if the OS is any other language, how can I find the name for the guest user ?Or how can i get the guest user name from a sid ?
I'm trying to view the users of a local group on my machine so I can eventually change their read/write permissions... what code can i use to display the users?
I want to be able to get and set values of Local Policy Editor using vb scripts (or for that matter any other command line thing). The problem is that for my requirement I cannot rely on the machine in question having anything like powershell. I want to be able to run a script/command and get/set the values of things inside Local Group Policy Editor.
eg. I want to be able to set things like running gpedit.msc and set the value for "\Computer ConfigurationAdministrative TemplatesNetworkOffline FilesDefault Cache Size", and I want to do this without manual intervention.
I know that using Dim currUser As String = Request.ServerVariables("LOGON_USER") retunrs the DomainUsername, but I want to know what Group that user is in say in Active Directory.
I am trying to create a data entry system for a local community group. I am working with VB.NET 2010 and MSAcess 2000. I am completely new to using a DB in VB.Net. I have created a form with the membership table bound as details on the form and the classes they are attending as a DataGridView. I used all the Visual Studio GUI tools for this. It was reasonably straightforward once I got the hang of things. My problems arise when I try to ensure that a user cannot move to a new record or create a new member without first saving any changes they have made.
I am using ColumnChanging events in the ...DataSet.vb class to set flags to indicate whether any data values have been changed on the form. My problem is that the ColumnChanging events for the classes DGV fire immediately on changing the data whereas the ones for the member details don't fire until I start to move to a new record. I don't know if it is important but my member navigation is achieved by means of a combobox on the form that lists the member names from the table. I have absolutely no idea why this works - it just did; the form updates as soon as the user selects a new member in the combo box.
Does anyone know how to run windows explorer with an admin account while logged in with a non admnistrative account? i want to be able to open up an admin share on a remote host with windows explorer instead of iexplorer. I tried some code I found on the net to impersonate but it didn't work.
1- Click run, and type the gpedit.msc, to start "Local Group Policy Editor". 2 -Expand "Computer Configuration" -> "Windows Settings" -> "Security Settings" -> "Local Policies" -> Then click "User Rights Assignment". 3- In the Policy window, Select "Force shutdown from a remote system", double click it, it will pop a properties window. 4- Click "Add user or group button", add a user and name it Guest.
I need to know if it's possible to manipulate and add the user or group programmatically. I'm using Visual Basic 2008.
I deduced from it, I could do it in (VB) .NET with this:
Dim strURL As String = "WinNT://" + strComputerName + "/<SID=" + strSID + ">" Dim de As DirectoryServices.DirectoryEntry = New DirectoryServices.DirectoryEntry(strURL) de.Properties("whatever").Value.ToString()
However, this doesn't work.Anybody knows how I can do this WITHOUT looping over all users (which requires to convert from byte[] to string first, and then compare [case insensitive] a lot of strings, which makes it slow).
In VB.Net, I'm trying to connect to WMI on my local computer with different credentials (the user won't have admin rights) and I get this exception : « User credentials cannot be used for local connections » Here's the code :
i'm trying to retrieve the SID of user to eventually set sharing permissions. I somehow missing how to properly set the parameters for win32_account so it autom. retrieves the SID and makes it available through account("SID").