Determining User Group Membership in Active Directory and ADAM

Table of contents:

Summary

Summary

All of the topics in this chapter center on how to manage user objects in either Active Directory or ADAM. This tends to be the most common task that developers are asked to perform. We have covered how we can efficiently find our user objects and set account properties in conjunction with domain-wide policies.

We also touched upon some of the more difficult tasks of setting passwords, as well as determining last logons and password expirations. Finally, we covered how to determine a user's group membership. While we have covered some of the most common, yet troublesome, tasks in user management, we have not exhaustively covered every possible user management scenario. Unfortunately, there are far too many to do them justice. We hope that because we showed the most irksome of the tasks, developers can extrapolate from the examples and use previous chapters as leaping points to figure out each unique scenario.

Part I: Fundamentals

Introduction to LDAP and Active Directory

Introduction to .NET Directory Services Programming

Binding and CRUD Operations with DirectoryEntry

Searching with the DirectorySearcher

Advanced LDAP Searches

Reading and Writing LDAP Attributes

Active Directory and ADAM Schema

Security in Directory Services Programming

Introduction to the ActiveDirectory Namespace

Part II: Practical Applications

User Management

User Management
Finding Users
Creating Users
Managing User Account Features
Managing Passwords for Active Directory Users
Managing Passwords for ADAM Users
Determining User Group Membership in Active Directory and ADAM
Summary

Group Management

Authentication

Part III: Appendixes

Appendix A. Three Approaches to COM Interop with ADSI

Appendix B. LDAP Tools for Programmers

Appendix C. Troubleshooting and Help

Index