Get user information from AD:

The below code will help us to retrieve all the information of a particular user by giving his/her userid. For executing this code you need to change the below LDAP string according to your infrastructure name.

        DirectoryEntry dir = new DirectoryEntry();

        dir.Path = "LDAP://YourDomainController ";        

        DirectorySearcher sea = new DirectorySearcher(dir);

        sea.Filter = "(sAMAccountName=satheesb)";

        SearchResult seares = sea.FindOne();      

        StringBuilder str = new StringBuilder();

        System.DirectoryServices.ResultPropertyCollection prop = seares.Properties;

        ICollection coll = prop.PropertyNames;

        IEnumerator enu = coll.GetEnumerator(); 

            while (enu.MoveNext())

            {

                str.Append(enu.Current + " = " + seares.Properties[enu.Current.ToString()][0] + "\n");

            }

           txtSummary.Text = str.ToString();

If you see the above code we are restricting the search by giving a filter to retrieve only a particular user, “satheesb” in our case. We can extend this query and narrow down the search according to our need. Multiple conditions can be given in the format,

(&(Attribute1=value)(Attribute2=value)(Attribute2=value))

The above query uses AND condition so all the conditions have to be satisfied. We can use OR with the help of “|” symbol and we can use the symbol “!” for NOT. For security purposes not every user id in an enterprise will have rights to update AD. DirectoryEntry class have UserName and Password property that will get the service account informations in case of ASP.Net application.

dir.Username = txtServiceUID.Text;

dir.Password = txtServicePwd.Text;

Update Active Directory in .Net:

We will see a simple example that will update the AD in this section. For making the understanding simple we will search for user with surname “babu” and update their country to India. Updations to a attribute in AD can be done through DirectoryEntry class by,

DirectoryEntry.Property[“PropertyName”].Value=”new Value”;

For example:

                dir.Properties["mobile"].Value = "9901999337";

Implementation:

    try

        {

            DirectoryEntry dir = new DirectoryEntry();

            dir.Path = "LDAP://YourDomainController ";        

            DirectorySearcher sea = new DirectorySearcher(dir);

            sea.Filter = "(sn=Babu)";

            SearchResultCollection seacoll = sea.FindAll();

            Response.Write(seacoll.Count.ToString());

            StringBuilder str = new StringBuilder();

            for (int i = 0; i < seacoll.Count; i++)

            {

                DirectoryEntry d = new DirectoryEntry();

                d.Path = seacoll[i].Path;

                d.Properties["co"].Value = "India";

                d.CommitChanges();

                if (d.Properties.Contains("sAMAccountName"))

                {

                    str.Append("sAMAccountName =" + d.Properties["sAMAccountName"].Value + "\n");

                }

                if (d.Properties.Contains("co"))

                {

                    str.Append("Country =" + d.Properties["co"].Value + "\n");                   

                }

                str.Append("---------" + "\n");

            }

            txtSummary.Text = str.ToString();

            Response.Write("Completed with " + seacoll.Count.ToString() + " Row(s)");

        }

        catch (Exception ex)

        {

            Response.Write(ex.Message);

        }