how to add, remove,update user from ADS using ASP..all web has loaded with ASP.NET but i need help in just ASP.
I need full help what settings i need to make on my webserver as i wana remove user from ADS. How to write code in ASP to interact with ADS.
I'd like to get some user account properties using .asp script. When I try
to use ADSI WINNT provider it works fine except that I apparently cannot
access some properties such as objUser.managedObjects. I have this simple
code:
<%
Set objUser = GetObject("LDAP://CN=Users,CN=FisrtName
LastName,DC=MyDomain,DC=com")
For Each strValue in objUser.managedObjects
Response.Write "This: " & strValue & "<br>"
Next
%>
As a VBS script it works fine but as an ASP page I cannot get the object
initialized. Is it problem with syntax or something else? I'd like to avoid
using .NET Framework and ADO connection as well if possible. All I really
need is to get list of managedObjects.
I've got the servervariable("logon_user") which contatins
domainnameusername.
How can I look up this users telephonenumber and groupmembership in AD in
the forest. (the forest contains 15 different domains)
we are developing an intranet application(web based)which needs to detect the logged in user ID of the user hitting the website.the intranet is huge and based on win2k active directory(around 20-30 different domains)with 25K+ users.i dont want to use "NT challenge response" for this pupose.
I am exploring ways using ADSI and WMI to query the Active directory by using the IP address in the incoming web request and trying to figure out the user ID logged into that machine how is it possible?
This is ASP and ASDI I think or just ASDI.. Not quite sure...BUt i have a script that will create a site in IIS 6.0 the code is:
set objRoot = objNew.Create ("IISWebVirtualDir", "Root")
objRoot.Path = "z:inetpubwwwroot" & UserName
objRoot.SetInfo
But instead of the absolute I want to set it up for a share on another computer with the path jotts2cinetpubwwwroot & userName . With the login Credentals of username admin password admin <<Just example. If everyone is like eh'. Free hosting to the person that figures it out.
I have found some code that authenticates users agains a domain using ADSI.
I then redirect to another page and pass the username they have entered as a
string. However, it would be nice to also get their full name from Active
Directory once authenticated. Can anyone suggest how I may modify this code
to achieve this? I would also like to pass their full name to the next page
as a string. The code I found: Code:
I know this isn't the best group to ask this in - but I also know a lot of
you have experience with this kind of stuff
I'm going to be creating a site where customers will be able to set up their
own sub-site (ie. www.mysite.com/theirsubsite). I'll need to be able to
create virtual directories on-the-fly, so I plan on using ADSI to accomplish
this. My question is - what are my options when it comes to permissions?
Will I need to give the IUSR account admin permissions to create these
directories, or is there some way to impersonate an admin account on the
script creating the directories? Has anyone dealt with this before?
I use the following ASP code to access Active Directory's property:
Dim objUser
Set objUser = GetObject("WinNT://myDomain/UserId")
I can get objUser.FullName. But when I try to get objUser.Division, there
occurs an error. Can you tell me how to get objUser.Division?
Has anyone ever experienced any problems authenticating with an ADSI application where after so long it stops responding. I can not track down what is causing the problem. I have a login page that uses the following code. This is running on a windows 2003 domain controller currently. If I put it on a windows 2000 member server I get this error way more often.
Dim oADsObject
Set oADsObject = GetObject(strADsPath)
Dim strADsNamespace
Dim oADsNamespace
strADsNamespace = left(strADsPath, instr(strADsPath, ":"))
set oADsNamespace = GetObject(strADsNamespace)
Set oADsObject = oADsNamespace.OpenDSObject(strADsPath, strUserName, strPassword, 1)
It authenticates fine, but after so long the login page stops working. If I restart the application pool the page starts to work again. I have a volume of about 500-700 users authenticated at any given time. Should I be authenticating a different way?
how (or if it's even possible) to cache the results of an ADSI call in asp for a longer period of time. Basically what I am doing is I have a website that loads the 'full
name' of the user that logs into it. Once the user full nam ehas been retreived (using adsi) the user can reload the page and it appears to just check a cached version of the request (since the page loads very fast).
If however the user waits a bit longer (maybe 5 min) and reloads the page it will take upto 4 secs to load the page (since the adsi call is being resubmitted). Is there anyway to increase the length of time that adsi info is cached?
First the brief: I'm currently developing an intranet at work. We have approximately 3000 users and they keep forgetting their passwords. We have 3 Tech-Support guys who keep having to reset them. The idea was to build a function in to the intranet to allow department heads to be able to reset other users passwords via asp.
All well and good. After a fair bit of reading, I've acquainted myself with the basics of talking to Active Directory and retrieving various objects, properties and values.
My problem is that when I try to update any of the objects (i'm focusing on the .description property at the moment 'cos when I break it - that's not gonna matter so much) But when I try and SetInfo, I get a General Access Error. My ServerVariables("LOGON_NAME") is empty. I was wondering if there was a way to force an asp page to run as the server administrator 'cos obviously when department heads login, we don't want all of them to be AD Admins. All they should be able to do is run my script to reset a password.
I'm not actually the server admin, and don't really know the specifics of IIS, but can I just tell it to run specific scripts as domainadmin? Or can I pass something in the asp headers to force it to authenticate as admin?
In the intranet system I'm building I need to draw information about Staff and integrate it into Department pages, and make it accessible via querystrings (so users can search for names). I've asked my IT department how to do this and they basically said "ask the internet"
So, if I want to access such information, where do I start? I cant find any tutorials that answer my questions, and feel a bit out of my depth regarding what I'm even meant to be asking. So basically... help! What's should be my plan of action!
I need to :
A) draw names, phone numbers, email addresses to show on relevant department pages.
B) Make a facility to search staff names to bring up similar information.
I have a script that I have set up to display users and their account status in an asp page, using adsi, then the web viewer can enable and disable accounts using this page. The problem I have is the anonymous user that IIS logs in with does not have the privileges to change accounts etc for active directory.
So, I made my server into an SSL server and made it ask for credentials using basic authentication. All works well for administrator as when the admin username and password are used, the script then runs with admin rights.
(as this is only a test server I can mess with all security etc before wrecking the real server!!) I delegated control to an OU that I wish to control with ASP and went and logged in as one of the users that was delegated control, but that says the script does not have the rights.
So, in effect, the script will not work unless I put in the admin username and passwords. I even delegated control to one user rather than a group but that still don't work. Any ideas please? Is it IIS, AD or ASP that is at fault?
I am using the ADSI objects to retrieve groups and users informations. If possible, how can I retrieve the user password? I've search in Microsoft.com but I find only the SetPassword function (that of course changes the user password).
View Replies View RelatedI'm trying to access the ADSI data on a remote machine in my network usng ASP and the GetObject("IIS://...") call, but I keep getting an "Access Denied" message. It works perfectly on the localhost. Did anyone pass by this problem?
View Replies View RelatedI want to be able to import data from active directory using an asp page. The problem is that i don't want to provide any username or login, i want the system to identify the logged user.
the script is runing fine if i provide the username and the password in the script but when i delete them i receive this error messahe : Providererror '80040e37' - Table does not exist Code:
I'd like to be able to list IIS websites and information in a web page
(presumably using ADSI). Similar to the list you get in the MMC plug-in.
Does anyone have a simple script I could start with? I'm only interested in
reading info at the moment.
My users logon to the Patriot domain, my intranet is on sdsddata01 server. I have a form that people have to click on a dropdown list to pick their name from the list when submitting a form. Is there any way to grab their username via ADSI so I can query it against a database that will get submitted against a form.
I have seen a few arcticles regarding this but I couldn't make sense of them. They are already authenticating when they login, so I don't want them to have to do it again once they hit the intranet. Is this possible using ADSI? Will I have to make some permission changes in IIS as well?
I have a set of web pages on an AD-authenticated web site that are
supposed to allow users to modify their own AD account attributes,
limited of course to things like their email address, URL, etc. I was
hoping to connect to LDAP using secure authentication as described on
a few tech web pages, and the connection works fine but when it's time
to commit the changes with .SetInfo, the script fails with: Code:
I am trying to use windows (nt/xp) authenication for a website which can be accessed from internet as well as intranet. Our windows authentication uses active directory(win 2kservers). On login page for website, I have get username from windows and then ask for entering the password again. Send this information to active directory and query active directory if user is employee or contractor. if Employee, then user can access the contents on web site other wise user gets a messge saying insuffcient priviledges. I would appreciate if some one could send me code snippets.
View Replies View RelatedIm trying to run an LDAP script from an ASP page. I know very little about LDAP, and just based on some sample code I found on the internet, I got the following:
<%
Set Conn=CreateObject("ADODB.Connection")
Conn.Provider="ADSDSOObject"
Conn.Open("ADs Provider")
Set rs=Conn.Execute("ldifde -f UsersFile.ldf -p Subtree -r
"(&(objectClass=user)(showinaddressbook=CN=Global Address
List,OU=Microsoft Exchange,OU=CMC,OU=D-corp,OU=Organizations,DC=d-corp,DC=corp))"")
Do While Not rs.EOF
ReturnValue=rs.Fields(0)
Response.Write ReturnValue&"<BR>"
%>
Obviously, it does not work !! If someone can help me with what direction I should be proceeding in to change the code so that it works?
Is it because I havent specified the server name or something, or is it because I cant execute an LDAP command like ldifde in such a straightforward manner and I need to change that?
I am looking at the ability for a user on my website to add/remove/edit windows user accounts, thus controlling access to my website. I have integrated windows authentication checked on the website and unchecked anon access in IIS, so I am always asked for a username and password.
I have seen some ADSI scripts that I can use in my ASP pages to manipulate local user accounts. However, when I try and use these they dont work as I need to have admin rights. Of course I don't wish to add the user to the admin group for security reasons....
Anyone have a code snippet to do this?
I am working on building a tool Using ASP/COM & IIS5.1 for a
non-administrative technical support team to change domain passwords for
users. I have the basic interface built and working from my developement
machine (Windows XP Pro SP 1A) which is hosting the pages for now. The
problem is that when I try to access the site from a browser on a different
pc using my credentials (IIS is running in Windows Authentication), it
appears that the ADSI queries stop working and I get the following errors:
a.. Error Type:
(0x8007200A)
/ASP_TEST.ASP, line 64
which corresponds with a code that queries Active Directory for a particular
OU to return the users within that OU.
I am a newbie to ASP developement so maybe I am missing something really
trivial, like can I even accomplish this task in this manner?
The users on my network, log in using a novell login box when they boot up their pc.
When they open their browser, they have to enter the same username and password to log into our intranet.
Is there anyway I can get rid of the login prompt for the browser, and log them in automatically using the initial windows login they entered.
I would like to authenticate users using an LDAP query also.
Can anyone direct me to some simple ASP code samples to do the following?
I'd like to, given a UID, check to see if an individual in a public
directory is part of a given OU.
I've noticed that for a given person there can be several OU's, so I don't
think it'd be possible to select an OU. However, can I select cn where UID
= xxx and OU = xxx and then check to see if it's not null? didn't know whether to put this in here or an LDAP group
I am encountering an issue attempting to log into the LDAP. Here is the code:
Dim objBase, objContainer, objUser, strLDAPPath, strErrNum, iCounter
strLDAPPath = "LDAP://xxxx.xxxxxx.xxx.com:389/ou=Ebenefits, o=xxxxxx.xxx.com"
Set objBase = GetObject("LDAP:")
Set objContainer = objBase.OpenDSObject(strLDAPPath, "uid=HRISAdmin,ou=Directory Administrators,o=xxxxxx.xxx.com", "password", 0)
Set objUser = objContainer.GetObject("user", "uid=" & strUID)
The Set objUser line of code returns the following error:
Error -2147463164 An unknown directory object was requested
Any thoughts?
I am trying to access ldap with standard ASP. The code works on the web server where I am developing but any other PC on network gets the following error:
Providererror '80040e37'
Table does not exist. /training/index.asp, line 41
Does anyone have any experience with this??
I'm trying to get user details using ASP under IIS (Win2000) with the following code:
Set User = GetObject("WinNT://domainname/" & mid(strNTUser,8) & ",user")
strNTUserFullName= User.Fullname
The website this is running under uses Windows Authentication only no anonymous logins and this presumably is why I get the error 'General access denied error' from AD as the logged in user's credentials are not passed to the AD domain controller that is being queried for the users details.
how to I get this to work whilst keeping Windows Authentication?I only need the most basic details about the user so writing LDAP queries and creating recordsets etc seems like overkill and presumably the same problem will occur?
I have a page which grabs data from Active Users which was working great last week. All of a sudden my code doesn't like some of the field names. For the purpose of keeping this short let's just say it's one field 'Department' Code:
Dim department
MyFullName = "FRED BLOGGS"
SQLStmt = "SELECT name,physicaldeliveryofficename,department " & _
"FROM 'LDAP://lvp-ad.myserver.wan' " & _
"WHERE objectClass = 'user' AND name='" & MyFullName &"'"
Set Conn = CreateObject("ADODB.Connection")
Conn.Provider = "ADSDSOObject"
Conn.Open "ADs Provider"
Set rs = Conn.Execute(SQLStmt)
So, if i remove department all works fine. Any help appreciated.
We need to use LDAP in conjunction with our ASP pages. Are there LDAP API
that can be used either from VB or VBScript ? Where can I find sample codes
for it ?
how do i collect current user using ldap and asp, i want to know who's doing what, so when a page loads can i check who's logged in to the domain?
View Replies View RelatedFollowing code works fine, except that I have to hard-code the user's
fullpath (2nd parameter of the OpenDSObject() method). Code:
I'm using the function copied below to authenticate users in LDAP before allowing them onto our intranet site. This works great! But what I'd like to do now is use the LDAP connection it creates to retreieve the users actual name.
I dont know how to do this so I've been looking for examples I can learn from on the net. I have found snipits of other people code but I've been tying myself in knots trying to fit them into my function and failing miserably.
Could anyone tell me what I need in the function below to get this information. From what I've seen I think I need to use some kind of filter on the LDAP object, but I dont know how to implement it. Code: