Adsi IIS And Active Directory Through ASP
I have a script that I have set up to display users and their account status in an asp page, using adsi, then the web viewer can enable and disable accounts using this page. The problem I have is the anonymous user that IIS logs in with does not have the privileges to change accounts etc for active directory.
So, I made my server into an SSL server and made it ask for credentials using basic authentication. All works well for administrator as when the admin username and password are used, the script then runs with admin rights.
(as this is only a test server I can mess with all security etc before wrecking the real server!!) I delegated control to an OU that I wish to control with ASP and went and logged in as one of the users that was delegated control, but that says the script does not have the rights.
So, in effect, the script will not work unless I put in the admin username and passwords. I even delegated control to one user rather than a group but that still don't work. Any ideas please? Is it IIS, AD or ASP that is at fault?
View Replies
ADVERTISEMENT
I have written a script to update user information in the Active Directory using ADSI. Here is part of it:
Set User = GetObject("LDAP://<GUID=" & GUID & ">")
User.Department = DepartmentName
User.SetInfo
Set User = Nothing
This works fine unless DepartmentName is an empty string ("").
Then I get error 0x8007200B: "The attribute syntax specified to the directory service is invalid."
This happens with all the attributes I have tried, including TelephoneNumber
.
Do I need to delete the value of the attribute instead of setting it to an empty string? If so, how do I do it?
View Replies
View Related
I'm trying to connect to the active directory using asp. I'm having problems with logging in, what happens is the username accepted is not the user logon name but the displayname is accpeted heres the code:
View Replies
View Related
Could anyone show me a sample, snippet, code chunk ... etc of how I can get ASP to find the Active Directory username based on a supplied email address?
For example: I want ASP to query active directory and retrieve the AD username for where user email address = 'whatever@whatever.com'
View Replies
View Related
I would like to write an ASP ap that asks for username/password and
validates against the active directory. Any ideas how/where I can do this?
In addition, once these people are logged in I want to be able to send the
to exchange's OWA and just be logged in, no second login/password.
View Replies
View Related
Is there anyway that I can add user to the active directory with asp?
Because I found one code to view information but not to add. Or if you can tell me where to see the command for asp and active Directory.
View Replies
View Related
I would like to check login credentials, ie username and password, from Active Directory via an asp page. This will allow users to login to a restricted area of the website using their windows login and password. I read a thread about it on here, but it just said that it was possible, it didn't say how it was possible.
View Replies
View Related
Is there something that would let me integrate ASP with Active Directory? I have seen a basic ones where it will allow you to create a login page. I am actually looking for something that will allow ASP to check user authentication but also be able to do such things as check which groups the person is in and allow them into certain pages according to their groups.
View Replies
View Related
We want to be able to allow our users to update this AD profile and
sepecifically be able to change the address, city and phone number fields
thorough a web page.
View Replies
View Related
I would like users on a web application to be able to select users from active directory and use their email address - in much the same way as Outlook does. How hard is this to do in asp? Would it be easier to do in .net?
I am proficient in asp but have never done this, on the other hand, I am starting to develop my .net skills.
View Replies
View Related
how to query active directory from asp for user info? If so do you know of any good tutorials or example pages?
View Replies
View Related
I'd like to set up a new web page that I'm writing in ASP so that it requires the users to authenticate using their domain accounts. The domain controller is Windows 2000 Server which is a member of my University's active directory. Does anyone know if this is even possible?
View Replies
View Related
I just want to know that how can i logged in using active directory login on ASP page also i need to redirect pages according to the GROUPs i.e if user succsesful login than it will redirect pages according to the user GROUPS, if user is in Finance Group then it will redirect to finance page and if its in IT GROUP it wil
View Replies
View Related
How would I go about extracting information from Active Directory using an ASP page so I can display things like the phone number, name,address etc....
View Replies
View Related
I'm working on a ASP web application which need to use Active Directory as uthentication method. I wonder if I can get some help from you, things like some sample component in VB or some window APIs i can call from asp pageand how to use it to get the username and password info .
View Replies
View Related
I'm looking to update some details in Active directory and was wondering how I could go about doing this,I can search and display items but want users to update there own details.If someone could point me in the right direction for some good resources.
View Replies
View Related
we just migrated to Windows Server 2003 and active directory. On our intranet I would like to personalize some of the pages my users hit. Let's say I login as petertom, when I go to my main page.
Is there a way to grab information form the fields in AD after a person authenticates? Is there a timeout, i.e., user logs in at 8:00 AM, but doesn't hit the intranet until 1:00 PM etc?
Eventually I would like people to get to secure areas without needing a login and password, but based on what AU or group they belong to, is this possible as well? Does any of this require changes to be made via IIS? (The intranet is running Win2k server, not Win2003).
View Replies
View Related
I would like to be able to pass a request to IIS to have a user name and password authenticated against my Active Directory Users database. I'm running Server 2003 however my web pages are build using ASP (not .NET).
What I want to do is to open the standard User Name/Password form (I don't know how to do that either) and then make my request and get back a True/False result. There must be a way to do that but I haven't found it after 3 hours of searching the web.
View Replies
View Related
I need to be able to integrate an ASP login system to work with active directory. The advice i need is that what access do i need to ask the IT department to grant to integrate the ASP code with Active directory.
View Replies
View Related
What is a good resource for integrating ASP applications with Active
Directory? I want pages that will allow operations on AD. A prime example is
that I want to have an ASP page that would ask users for their AD password
and verify...
View Replies
View Related
I create an ASP application for Windows 2003 server (Czech) with Exchange 2003. When I want to create new user in Active Directory from my application- this error occurs:
Active Directory error 80070005'
General Access error denied
Web application runs under ADMINISTRATOR account and problematic code is:
Set oOU = GetObject("LDAP://test.test.cz/ou=skup,dc=test,dc=test,dc=cz")
Set oUser = oOU.Create("User", "cn=" & "Test" & " " & "Tester")
oUser.Put "sAMAccountName", "Test13"
oUser.SetInfo
View Replies
View Related
i mentioned in a previous thread that i've been trying, with varying degrees of success, to access AD fields through the use of a SQL statement and LDAP. The problem i'm facing now is how to update AD using the same method - i've tried the usual SQL update command, but with no luck.
What I need to do is allow the currently logged in user to update specific parts of their AD profile. Finding the username with request.servervariables is simple enough, but whenever I try and write to AD it throws up errors. Does anybody have any experience of this? Is it even possible to update AD using SQL, and if not are there any other methods of doing so?
View Replies
View Related
Could someone tell me how I can get all users within a certain group from AD using classic ASP?
View Replies
View Related
I was wondering whether if it was possible to insert users into active directory using ASP and then also viewing those users as well. Also, how would I implement such tasks in the most secure way?
View Replies
View Related
I need to get the current logon (to AD) user name on ASP level. Is there any ActiveX (ocx,dll) object in windows directory, which I can use? I used the nwdir.dll file to get this name from novell directory with ndap....
View Replies
View Related
I have a question concerning ASP classic. I'm trying to add an existing user in active directory to an AD group using a web-based form. Using regular code to do this, I get a general access denied error, upon which further research told me I needed admin rights in order to accomplish the task.
I vaguely remember an ASP project I worked on in the past where the script itself authenticated to active directory before requesting information. Is it possible to authenticate to AD (as in, authenticating with my username/password which has access to add users to this specific AD group), then continue with the commands that way? I've resurrected a bit of code from that prior project, and attempted to mix the two together: Code:
View Replies
View Related
Does anyone have a script ASP 3.0 that will return the email address and display name for the current user in Active Directory.
Not be using Anonymous access and will be using Integrated Windows Authentication.
View Replies
View Related
I am running windows 2000 on a client PC, running IIS and a helpdesk application created in house. Whenever someone on the domain (domain.com we'll call it)...tries to access the helpdesk app, it prompts them for a u/n; password. SWEET! This is what I want.
Here's where the problem lies in. WHen they type in their domain username/pwd combo...they get a "failed authentication" as it prompts them back with the fully qualified domain name of the pc the Helpdesk is on followed by their username. In short, they have to enter our domain (domain.com) followed by their username and password to work right.
The PC which houses the Helpdesk app is on the domain and is set up to authenticate users based on the domain relation. As a matter of fact, I have say Jack set up with everything but FUll Control. He can get in as long as in the username box it looks something like: Code:
View Replies
View Related
I'm trying to add a user to active directory using ASP and am receiving the
following error:-
Active Directory (0x80070005)
General Access Denied Error
Does anyone know how to get round this problem?
View Replies
View Related
I would like to list IN our Active directory all group that begin named and start with "GRP-" to put in a dopsown list for a form.
Maybe for the begging, the code to only list group in AD to display in a webpage can be nice.
View Replies
View Related
I am trying to access user info in a remote Active Directory Server with an ASP application. For testing purpose, I set up a test domain controller (Win2k Server) and installed Active Directory Server.
I am able to retrieve the user info with the program below when I run the program(http://testmachine/test.asp) on the test domain controller machine. However, if I run the program(http://machine2/test.asp) from another machine in the same domain (Windows XP), it returns empty record set. Code:
View Replies
View Related
I'm trying to retrieve data on all users currently within our active directory system, and although i have had some success there is one field that i still can't extract the values from - postalAddress. I'm using the following code:
View Replies
View Related
I'm working on a logon script that needs to query AD for the current user's information. Phone numbers, email address, etc. One thing that makes it a little bit more difficult is that I don't have the full dn for the user; I only have the base dc and cn.
Microsoft's documentation on all of this is lacking greatly, so I've been racking my brains quite a bit.
View Replies
View Related
