Query Active Directory through asp page

[KarlGoddard]

Hi All

Just wondered if anyone here has used ASP / ASP.NET pages to rerieve data from Active Directory.

I'm currently looking at how to pull simple stuff from AD to create a staff look-up page for our intranet.

It'd be great to hear from anyone who's done this and would be willing to pass on any pointers etc

Thanks
Karl

[RobC]

I know it can be done, as Fujitsu have created a User Admin page for us that allows us to create/delete & edit users via a webpage. I'll try & see if I can view the source code & post some or all of it on here tomorrow.

[Ric_]

Possibly an aside, but if you just want to query and change user details, you could simply create a customised MMC.

Obviously, the web page has its advantages though.

[Geoff]

http://www.15seconds.com/issue/020730.htm

[mark]

web access would mean we could work on ad remotely. I'd love to havethat!

[eejit]

web access would mean we could work on ad remotely. I'd love to havethat!

If by "remotely" you mean other PCs on the domain, then deploy the "windows 2003 server adminpak.msi" to all workstations, then on any PC in the domain you can go to the Administrative Tools folder and work on Active Directory, DNS, DHCP, WINS or whatever. I also deploy the group policy management console throughout the domain too.

Bloody handy.

[ChrisH]

I use remote dektop to access my servers remotely.

[Dos_Box]

If by "remotely" you mean other PCs on the domain, then deploy the "windows 2003 server adminpak.msi" to all workstations, then on any PC in the domain you can go to the Administrative Tools folder and work on Active Directory, DNS, DHCP, WINS or whatever. I also deploy the group policy management console throughout the domain too.

Bloody handy.

Handy yes. Dammed big security risk definitely!!

[mark]

I meant off site - I only have it on 3 machines - 2 for teaching staff to have access to a student account mmc to change passwords, and mine.

[eejit]

If by "remotely" you mean other PCs on the domain, then deploy the "windows 2003 server adminpak.msi" to all workstations, then on any PC in the domain you can go to the Administrative Tools folder and work on Active Directory, DNS, DHCP, WINS or whatever. I also deploy the group policy management console throughout the domain too.

Bloody handy.

Handy yes. Dammed big security risk definitely!!

How so? Only admins can access or run it.

[Geoff]

Nope!

[tarquel]

hehe Depends how locked down the users are - mine would never find it or be able to run it lol

The ironic thing is that the pupils are more likely to find it than the not-as-locked-down admin network with adults on it lol

Nath

[eejit]

Nope!

Yep!

When I said access it, I meant that our students have locked down desktops and mandatory profiles.

[Geoff]

Ok thats great but did you remove their access to the AD objects. If not, they can still view the settings with a few lines of VB script.

[spc-rocket]

Hi,

From what i thought, you need to use something like LDAP (lighweight directory application protocol), which allows you to manipulate AD. This is probably the fastest was to do it and can be done using asp pages. ADSI is another option.

HTH,

Ashok.