Enable/Disable local active directory account from code?

[Michael Howes]

This MSDN article
http://msdn2.microsoft.com/en-us/lib...13(vs.80).aspx

and this codeproject article
http://www.codeproject.com/useritems/everythingInAD.asp

both show the same c# code for enabling and disabling active directory
accounts.

I'm trying to do that to a local user account and it's not working
the "userAccountCon trol" Property is null on my user.

this code fales because that property doesn't exist on my local user

DirectoryEntry user = new DirectoryEntry( member);
val = (int)user.Prope rties["userAccountCon trol"].Value;

the user I'm trying to do this to is not a domain user, the account is
local to the machine.

any ideas?
thanks
mike

PS I looped through the properties of my user and saw these;
"UserFlags"
"MaxStorage "
"PasswordAg e"
"PasswordExpire d"
"LoginHours "
"FullName"
"Descriptio n"
"BadPasswordAtt empts"
"LastLogin"
"HomeDirect ory"
"LoginScrip t"
"Profile"
"HomeDirDri ve"
"Parameters "
"PrimaryGroupID "
"Name"
"MinPasswordLen gth"
"MaxPasswordAge "
"MinPasswordAge "
"PasswordHistor yLength"
"AutoUnlockInte rval"
"LockoutObserva tionInterval"
"MaxBadPassword sAllowed"
"RasPermissions "
"objectSid"

[=?Utf-8?B?U2l2YSBN?=]

Try this:

// Set the 2nd bit
user.Properties["UserFlags"].Value =
((int)user.Prop erties["UserFlags"].Value) | 2;
"Michael Howes" wrote:

This MSDN article
http://msdn2.microsoft.com/en-us/lib...13(vs.80).aspx

and this codeproject article
http://www.codeproject.com/useritems/everythingInAD.asp

both show the same c# code for enabling and disabling active directory
accounts.

I'm trying to do that to a local user account and it's not working
the "userAccountCon trol" Property is null on my user.

this code fales because that property doesn't exist on my local user

DirectoryEntry user = new DirectoryEntry( member);
val = (int)user.Prope rties["userAccountCon trol"].Value;

the user I'm trying to do this to is not a domain user, the account is
local to the machine.

any ideas?
thanks
mike

PS I looped through the properties of my user and saw these;
"UserFlags"
"MaxStorage "
"PasswordAg e"
"PasswordExpire d"
"LoginHours "
"FullName"
"Descriptio n"
"BadPasswordAtt empts"
"LastLogin"
"HomeDirect ory"
"LoginScrip t"
"Profile"
"HomeDirDri ve"
"Parameters "
"PrimaryGroupID "
"Name"
"MinPasswordLen gth"
"MaxPasswordAge "
"MinPasswordAge "
"PasswordHistor yLength"
"AutoUnlockInte rval"
"LockoutObserva tionInterval"
"MaxBadPassword sAllowed"
"RasPermissions "
"objectSid"

[Willy Denoyette [MVP]]

"Michael Howes" <mh****@xforteb io.comwrote in message
news:eU******** ******@TK2MSFTN GP03.phx.gbl...

This MSDN article
http://msdn2.microsoft.com/en-us/lib...13(vs.80).aspx

and this codeproject article
http://www.codeproject.com/useritems/everythingInAD.asp

both show the same c# code for enabling and disabling active directory
accounts.

I'm trying to do that to a local user account and it's not working
the "userAccountCon trol" Property is null on my user.

this code fales because that property doesn't exist on my local user

DirectoryEntry user = new DirectoryEntry( member);
val = (int)user.Prope rties["userAccountCon trol"].Value;

the user I'm trying to do this to is not a domain user, the account is
local to the machine.

any ideas?
thanks
mike

PS I looped through the properties of my user and saw these;
"UserFlags"
"MaxStorage "
"PasswordAg e"
"PasswordExpire d"
"LoginHours "
"FullName"
"Descriptio n"
"BadPasswordAtt empts"
"LastLogin"
"HomeDirect ory" "LoginScrip t"
"Profile"
"HomeDirDri ve"
"Parameters "
"PrimaryGroupID "
"Name"
"MinPasswordLen gth"
"MaxPasswordAge "
"MinPasswordAge "
"PasswordHistor yLength"
"AutoUnlockInte rval"
"LockoutObserva tionInterval"
"MaxBadPassword sAllowed"
"RasPermissions "
"objectSid"

"UserFlags" is what you need to look at.

...
const int UF_ACCOUNTDISAB LE = 0x0002;
string userName = "someoneIdontLi ke";
using(Directory Entry comp = new DirectoryEntry( "WinNT://" +
Environment.Mac hineName + ",computer" ))
{
using(Directory Entry NewUser = comp.Children.F ind(userName, "user"))
{
NewUser.Propert ies["UserFlags"].Value =
((int)NewUser.P roperties["userFlags"].Value) ^ UF_ACCOUNTDISAB LE;
NewUser.CommitC hanges();
}
}

Note that here I'm only resetting the UF_ACCOUNTDISAB LE bit, while I'm
preserving the other bits!
Search MSDN for the other possible bits in this property.

Willy.

[Jeremy]

For a start there is no such thing as a local AD account. It is a SAM
account, so the ADSI scripting wont work. You need this code:

strComputer = "atl-ws-01"
Set objUser = GetObject("WinN T://" & strComputer & "/Guest")

objUser.Account Disabled = True
objUser.SetInfo

From here:
http://www.microsoft.com/technet/scr....mspx?mfr=true

"Michael Howes" <mh****@xforteb io.comwrote in message
news:eU******** ******@TK2MSFTN GP03.phx.gbl...

This MSDN article
http://msdn2.microsoft.com/en-us/lib...13(vs.80).aspx

and this codeproject article
http://www.codeproject.com/useritems/everythingInAD.asp

both show the same c# code for enabling and disabling active directory
accounts.

I'm trying to do that to a local user account and it's not working
the "userAccountCon trol" Property is null on my user.

this code fales because that property doesn't exist on my local user

DirectoryEntry user = new DirectoryEntry( member);
val = (int)user.Prope rties["userAccountCon trol"].Value;

the user I'm trying to do this to is not a domain user, the account is
local to the machine.

any ideas?
thanks
mike

PS I looped through the properties of my user and saw these;
"UserFlags"
"MaxStorage "
"PasswordAg e"
"PasswordExpire d"
"LoginHours "
"FullName"
"Descriptio n"
"BadPasswordAtt empts"
"LastLogin"
"HomeDirect ory" "LoginScrip t"
"Profile"
"HomeDirDri ve"
"Parameters "
"PrimaryGroupID "
"Name"
"MinPasswordLen gth"
"MaxPasswordAge "
"MinPasswordAge "
"PasswordHistor yLength"
"AutoUnlockInte rval"
"LockoutObserva tionInterval"
"MaxBadPassword sAllowed"
"RasPermissions "
"objectSid"