DirectoryServices.AccountManagement

[=?Utf-8?B?RGF2aWQgSmVua2lucyBUb3BwYW4=?=]

I'm really having a hard time using DirectoryServices.AccountManagement. I
seem to be able to get it to work fine in Visual Web Developer 2008 but when
I deploy to a IIS Server I get cast issues.

I have a screenshot here:
http://forums.asp.net/p/1210311/2131427.aspx#2131427

Unable to cast object of type
'System.DirectoryServices.AccountManagement.GroupP rincipal' to type
'System.DirectoryServices.AccountManagement.UserPr incipal'.

[Willy Denoyette [MVP]]

"David Jenkins Toppan" <Da****************@discussions.microsoft.comwro te
in message news:1B**********************************@microsof t.com...

I'm really having a hard time using DirectoryServices.AccountManagement.
I
seem to be able to get it to work fine in Visual Web Developer 2008 but
when
I deploy to a IIS Server I get cast issues.

I have a screenshot here:
http://forums.asp.net/p/1210311/2131427.aspx#2131427

Unable to cast object of type
'System.DirectoryServices.AccountManagement.GroupP rincipal' to type
'System.DirectoryServices.AccountManagement.UserPr incipal'.

You are running in the context of a group SID, not a user account SID.
If ASP.NET is running as NT_AUTHORITY\NETWORK SERVICE or NT_AUTHORITY\LOCAL
SERVICE, then the current user SID is a group SID and the cast to a
UserPrincipal will fail (this is normal). So, you need to make sure that you
run in the context of a user account, or you need to catch this exception
and take the appropriate action.

Willy.

[=?Utf-8?B?RGF2aWQgSmVua2lucyBUb3BwYW4=?=]

Are there any articles I could read that you know of that explains what I
need to do?

"Willy Denoyette [MVP]" wrote:

"David Jenkins Toppan" <Da****************@discussions.microsoft.comwro te
in message news:1B**********************************@microsof t.com...

I'm really having a hard time using DirectoryServices.AccountManagement.
I
seem to be able to get it to work fine in Visual Web Developer 2008 but
when
I deploy to a IIS Server I get cast issues.

I have a screenshot here:
http://forums.asp.net/p/1210311/2131427.aspx#2131427

Unable to cast object of type
'System.DirectoryServices.AccountManagement.GroupP rincipal' to type
'System.DirectoryServices.AccountManagement.UserPr incipal'.

You are running in the context of a group SID, not a user account SID.
If ASP.NET is running as NT_AUTHORITY\NETWORK SERVICE or NT_AUTHORITY\LOCAL
SERVICE, then the current user SID is a group SID and the cast to a
UserPrincipal will fail (this is normal). So, you need to make sure that you
run in the context of a user account, or you need to catch this exception
and take the appropriate action.

Willy.

[Willy Denoyette [MVP]]

"David Jenkins Toppan" <Da****************@discussions.microsoft.comwro te
in message news:2B**********************************@microsof t.com...

>I was trying to pull attributes like name and phone number of the current
user. This is an Intranet application I'm creating.

I see, in that case you need to make sure that "Windows Authentication" is
enabled and that you are "impersonating", and that your clients are using
IE.

Willy.

[=?Utf-8?B?RGF2aWQgSmVua2lucyBUb3BwYW4=?=]

I'll read up on it. I've got the web.config already setup for Windows and
disabled Anonymous access. In IIS I've uncheck anonymous logon and selected
Integrated Windows Authentication.

I appreciate the help. If you know of a good example on the net on how to
do Impersonation that would be great. I'm still a Novice. I'm an MCSE so I
really only know AD other MS Applications.

"Willy Denoyette [MVP]" wrote:

"David Jenkins Toppan" <Da****************@discussions.microsoft.comwro te
in message news:2B**********************************@microsof t.com...

I was trying to pull attributes like name and phone number of the current
user. This is an Intranet application I'm creating.

I see, in that case you need to make sure that "Windows Authentication" is
enabled and that you are "impersonating", and that your clients are using
IE.

Willy.