Help with vbscript in asp.net

[teejayem]

Set objUser = GetObject("WinNT://WALKER_MORRIS/hup^,user")
If objUser.IsAccountLocked = True Then .......

I am using the above code as part of my asp.net web application.
I have tested the code and it works fine except when the code executes
as part of my webpage i receive the following error:-

ActiveX component can't create object 'CreateObject'

Any ideas?

[Mark Rae [MVP]]

<te******@gmail.comwrote in message
news:11**********************@o80g2000hse.googlegr oups.com...

Set objUser = GetObject("WinNT://WALKER_MORRIS/hup^,user")
If objUser.IsAccountLocked = True Then .......

I am using the above code as part of my asp.net web application.
I have tested the code and it works fine except when the code executes
as part of my webpage i receive the following error:-

ActiveX component can't create object 'CreateObject'

Any ideas?

That's Classic ASP code...

To interface with ActiveDirectory in .NET, you need to use the
System.DirectoryServices namespace...
--
Mark Rae
ASP.NET MVP
http://www.markrae.net

[Aidy]

Also can you confirm if this code is running on the client via <script>
tags? If it is then you're probably running into security issues, you can't
just create any old ActiveX object on the client.

<te******@gmail.comwrote in message
news:11**********************@o80g2000hse.googlegr oups.com...

Set objUser = GetObject("WinNT://WALKER_MORRIS/hup^,user")
If objUser.IsAccountLocked = True Then .......

I am using the above code as part of my asp.net web application.
I have tested the code and it works fine except when the code executes
as part of my webpage i receive the following error:-

ActiveX component can't create object 'CreateObject'

Any ideas?

[teejayem]

On 10 Oct, 10:05, "Aidy" <[e-mail]:

Also can you confirm if this code is running on the client via <script>
tags? If it is then you're probably running into security issues, you can't
just create any old ActiveX object on the client.

<[e-mail] in message

news:11**********************@o80g2000hse.googlegr oups.com...

Set objUser = GetObject("WinNT://WALKER_MORRIS/hup^,user")
If objUser.IsAccountLocked = True Then .......

I am using the above code as part of my asp.net web application.
I have tested the code and it works fine except when the code executes
as part of my webpage i receive the following error:-

ActiveX component can't create object 'CreateObject'

Any ideas?- Hide quoted text -

- Show quoted text -

Yes I am running the code on the client using <scripttags
Think this is probably a security issue.
Is there any way round this?

[Mark Rae [MVP]]

<te******@gmail.comwrote in message
news:11**********************@22g2000hsm.googlegro ups.com...

Yes I am running the code on the client using <scripttags

You didn't say that in your original post...

Think this is probably a security issue.
Is there any way round this?

Do your AD work server-side using the System.DirectoryServices namespace,
after setting ASP.NET up to impersonate a user with sufficient privileges...
--
Mark Rae
ASP.NET MVP
http://www.markrae.net

[teejayem]

On 10 Oct, 10:25, "Mark Rae [MVP]" <[e-mail]:

<[e-mail] in message

news:11**********************@22g2000hsm.googlegro ups.com...

Yes I am running the code on the client using <scripttags

You didn't say that in your original post...

Think this is probably a security issue.
Is there any way round this?

Do your AD work server-side using the System.DirectoryServices namespace,
after setting ASP.NET up to impersonate a user with sufficient privileges...

--
Mark Rae
ASP.NET MVPhttp://www.markrae.net

This works when I run it on my webserver. Not in VS but when i go
into my web browser and type the address http://computername/stripnet
If i run from any other application i get the a run time error.
Do i have to add the directoryservices.dll into my root web folder or
something?

[Mark Rae [MVP]]

<te******@gmail.comwrote in message
news:11**********************@y27g2000pre.googlegr oups.com...

Do i have to add the directoryservices.dll into my root web folder or
something?

You have to add a reference to it in your project...
--
Mark Rae
ASP.NET MVP
http://www.markrae.net

[teejayem]

On 12 Oct, 10:31, "Mark Rae [MVP]" <[e-mail]:

<[e-mail] in message

news:11**********************@y27g2000pre.googlegr oups.com...

Do i have to add the directoryservices.dll into my root web folder or
something?

You have to add a reference to it in your project...

--
Mark Rae
ASP.NET MVPhttp://www.markrae.net

I have added the reference to the project.

[teejayem]

On 12 Oct, 10:43, "[e-mail]" <[e-mail]:

On 12 Oct, 10:31, "Mark Rae [MVP]" <[e-mail]:

<[e-mail] in message

news:11**********************@y27g2000pre.googlegr oups.com...

Do i have to add the directoryservices.dll into my root web folder or
something?

You have to add a reference to it in your project...

--
Mark Rae
ASP.NET MVPhttp://www.markrae.net

I have added the reference to the project.

i get the following error

Server Error in '/StripNET' Application.

Runtime Error
Description: An application error occurred on the server. The current
custom error settings for this application prevent the details of the
application error from being viewed remotely (for security reasons).
It could, however, be viewed by browsers running on the local server
machine.

if i remove the part using directory services it runs without an error.

[Mark Rae [MVP]]

<te******@gmail.comwrote in message
news:11**********************@e34g2000pro.googlegr oups.com...

>I have added the reference to the project.

i get the following error

Server Error in '/StripNET' Application.

Then there's either a bug in your code somewhere, or you're not using
Windows 2003...

Presumably your code looks something like this:
http://en.csharp-online.net/User_Man...ccount_Lockout

How are you actually referencing the User object...?
--
Mark Rae
ASP.NET MVP
http://www.markrae.net

[teejayem]

On 12 Oct, 11:31, "Mark Rae [MVP]" <[e-mail]:

<[e-mail] in message

news:11**********************@e34g2000pro.googlegr oups.com...

I have added the reference to the project.

i get the following error

Server Error in '/StripNET' Application.

Then there's either a bug in your code somewhere, or you're not using
Windows 2003...

Presumably your code looks something like this:http://en.csharp-online.net/User_Man..._Directory%E2%...

How are you actually referencing the User object...?

--
Mark Rae
ASP.NET MVPhttp://www.markrae.net

No, the code works fine. It works fine on my PC which is running
IIS. Even if I am browsing to it out of VS. But if any other user
tried to use it on their machine it throws up the error. If i remove
this code that checks if the account is locked out then other users
don't receive the error.

my code is as follows:-

imports system.directoryservices

' some code above here which is not causing the problem.
Dim objUser As New DirectoryEntry("LDAP://" & strLDAP)
Dim objSearcher As DirectorySearcher = New
DirectorySearcher(objUser)
Dim objResults As SearchResultCollection
Dim objResult As SearchResult
Const lockoutFlag As Integer = 16

objSearcher.PropertiesToLoad.Add("msds-User-Account-Control-
Computed")

objResults = objSearcher.FindAll()

For Each objResult In objResults
Dim status As Integer =
DirectCast(objResult.Properties("msds-User-Account-Control-Computed")
(0), Integer)
If (status And lockoutFlag) = lockoutFlag Then
IsAccountLocked = True
Session("LDAP") = strLDAP
Else
IsAccountLocked = False
End If
Next

objUser.Close()
objUser.Dispose()
thanks for your help by the way. I really appreciate it!

[Mark Rae [MVP]]

<te******@gmail.comwrote in message
news:11*********************@v29g2000prd.googlegro ups.com...

On 12 Oct, 11:31, "Mark Rae [MVP]" <[e-mail]:

><[e-mail] in message

news:11**********************@e34g2000pro.googleg roups.com...

>I have added the reference to the project.

i get the following error

Server Error in '/StripNET' Application.

Then there's either a bug in your code somewhere, or you're not using
Windows 2003...

Presumably your code looks something like
this:http://en.csharp-online.net/User_Man..._Directory%E2%...

How are you actually referencing the User object...?

--
Mark Rae
ASP.NET MVPhttp://www.markrae.net

No, the code works fine. It works fine on my PC which is running
IIS. Even if I am browsing to it out of VS. But if any other user
tried to use it on their machine it throws up the error. If i remove
this code that checks if the account is locked out then other users
don't receive the error.

my code is as follows:-

imports system.directoryservices

' some code above here which is not causing the problem.
Dim objUser As New DirectoryEntry("LDAP://" & strLDAP)
Dim objSearcher As DirectorySearcher = New
DirectorySearcher(objUser)
Dim objResults As SearchResultCollection
Dim objResult As SearchResult
Const lockoutFlag As Integer = 16

objSearcher.PropertiesToLoad.Add("msds-User-Account-Control-
Computed")

objResults = objSearcher.FindAll()

For Each objResult In objResults
Dim status As Integer =
DirectCast(objResult.Properties("msds-User-Account-Control-Computed")
(0), Integer)
If (status And lockoutFlag) = lockoutFlag Then
IsAccountLocked = True
Session("LDAP") = strLDAP
Else
IsAccountLocked = False
End If
Next

objUser.Close()
objUser.Dispose()
thanks for your help by the way. I really appreciate it!

--
Mark Rae
ASP.NET MVP
http://www.markrae.net

[Mark Rae [MVP]]

<te******@gmail.comwrote in message
news:11*********************@v29g2000prd.googlegro ups.com...

No, the code works fine. It works fine on my PC which is running
IIS. Even if I am browsing to it out of VS. But if any other user
tried to use it on their machine it throws up the error. If i remove
this code that checks if the account is locked out then other users
don't receive the error.

As I mentioned a couple of replies back, the user under which ASP.NET runs
by default doesn't have sufficient privileges to query ActiveDirectory, so
you will need to set up impersonation. Pretty much any standard DomainUser
account will do unless you need to make changes to AD objects...
--
Mark Rae
ASP.NET MVP
http://www.markrae.net

[teejayem]

On 10 Oct, 10:05, "Aidy" <[e-mail]:

Also can you confirm if this code is running on the client via <script>
tags? If it is then you're probably running into security issues, you can't
just create any old ActiveX object on the client.

<[e-mail] in message

news:11**********************@o80g2000hse.googlegr oups.com...

Set objUser = GetObject("WinNT://WALKER_MORRIS/hup^,user")
If objUser.IsAccountLocked = True Then .......

I am using the above code as part of my asp.net web application.
I have tested the code and it works fine except when the code executes
as part of my webpage i receive the following error:-

ActiveX component can't create object 'CreateObject'

Any ideas?- Hide quoted text -

- Show quoted text -

Is ther a way around this? I have decided to do my AD work server
side but now I am wanting to add some scripts that will need to be run
client side and will need to create activex objects?

[Aidy]

Is ther a way around this? I have decided to do my AD work server

side but now I am wanting to add some scripts that will need to be run
client side and will need to create activex objects?

You'll need to mark the objects as safe in each user's registry, or (better)
develop your own activex control that will do the coding for you. Users
will need to accept to download and install the activex control.

[teejayem]

On 22 Oct, 16:29, "Aidy" <[e-mail]:

Is ther a way around this? I have decided to do my AD work server
side but now I am wanting to add some scripts that will need to be run
client side and will need to create activex objects?

You'll need to mark the objects as safe in each user's registry, or (better)
develop your own activex control that will do the coding for you. Users
will need to accept to download and install the activex control.

How do I mark the object as safe in a users registry?

[Aidy]

http://msdn2.microsoft.com/en-us/library/aa751977.aspx

<te******@gmail.comwrote in message
news:11**********************@y27g2000pre.googlegr oups.com...

On 22 Oct, 16:29, "Aidy" <[e-mail]:

Is ther a way around this? I have decided to do my AD work server
side but now I am wanting to add some scripts that will need to be run
client side and will need to create activex objects?

You'll need to mark the objects as safe in each user's registry, or
(better)
develop your own activex control that will do the coding for you. Users
will need to accept to download and install the activex control.

How do I mark the object as safe in a users registry?