Problem in creating windows user using adsi

[pratibha14]

hi,

From windows form application I can create new user on local machine without problem. But when I try to create new user in web application there is an error "System.UnauthorizedAccessException:General access denied error at System.DirectoryServices.Interop.IAds.SetInfo() at System.DirectoryServices.DirectoryEntry.CommitChanges()

code is
DirectoryEntry de = new DirectoryEntry("WinNT://" + Environment.MachineName + ",computer");
DirectoryEntry newUser = de.Children.Add("TestUser1", "User");
newUser.Password = pwd;
newUser.CommitChanges();
DirectoryEntry grp = de.Children.Find("Guests", "group");
if (grp.Name != "")
{
grp.Invoke("Add", (object)newUser.Path.ToString());
}

Any Suggestions?
Thanks
Pratibha

 

[shatch]

You should try impersonating a user with the relevant permissions to do this, below is some sample code you could use to do this:

Private Function createNTUserWithAD(ByRef domainName As
String, ByRef userName As String) As Long


Dim myDirEntry As DirectoryEntry


Dim impersonationContext As
System.Security.Principal.WindowsImpersonationContext
Dim currentWindowsIdentity As
System.Security.Principal.WindowsIdentity


currentWindowsIdentity = CType(User.Identity,
System.Security.Principal.WindowsIdentity)
impersonationContext =
currentWindowsIdentity.Impersonate()

Try
' trying to connect
myDirEntry = New DirectoryEntry()
myDirEntry.Path = "WinNT://" & domainName
myDirEntry.AuthenticationType =
AuthenticationTypes.Secure

' creating the user
myDirEntry.Children.Add(userNames, "User")
myDirEntry.CommitChanges()
Return 0
Catch myException As System.UnauthorizedAccessException
Response.Write(myException.ToString())
Return -1
End Try
impersonationContext.Undo()
End Function

 

[pratibha14]

Thanks but above code also returns some error at CommitChanges()

NotImplementedException: Not implemented
]
System.DirectoryServices.Interop.IAds.SetInfo() +0
System.DirectoryServices.DirectoryEntry.CommitChanges() +182
Default_aspx.Page_Load(Object sender, EventArgs e) in E:\Pratibha\Websites\WebSite1\Default.aspx.vb:22
System.Web.UI.Control.OnLoad(EventArgs e) +87
System.Web.UI.Control.LoadRecursive() +55
System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +2836

Any idea?
Thanks

 

[shatch]

Try replacing the following line

myDirEntry.Path = "WinNT://" & domainName

With an LDAP connection

myDirEntry.Path = "LDAP://" & domainName

and put in the name of the server as formatted for the LDAP query:

createNTUserWithAD("dc=exchangesvr, dc=microsoft, dc=com", "testuserxyz")

and that should work, it did for me

Hope that helps