Active Directory

[vbc22]

Hi,

I ran VBA code to access information from Active Directory; information like user names, groups which the user belongs to.

I was wondering, is there a security issue with this privledge of querying Active Directory?

I didn't find the syntax yet, but could I run code to query what a user's password is? I saw VBA code that can allow you to edit users (like add a new user) -- this prompted me to question if unauthorized code could tamper with Active Directory information?

If I posted in the wrong forum, I sincerely apologize. Your guidance on where to post next time, and any reference to the thread topic would be very much appreciated.

Regards.

 

[CautionMP]

vbc22,
Active Directory is a datbase with it's own security model so you will only be able to do what the admin's permit you to do.

As far as the password goes, I believe you can set it, you can compare against it, but you can't actually read the value.

Hope this helps,
CMP

[small]For the best results do what I'm thinking, not what I'm saying.[/small]
(GMT-07:00) Mountain Time (US & Canada)

 

[vbc22]

hi CautionMP,

Thank you for that...I'm going to investigate a little bit more...I'm totally new to Active Directory.