Changing Active Directory user information via ASP.NET

[Koen]

Hi,

i've written some code that changes the user information (eg givenname, sn,
department, ...) from a user in AD. The code runs without an error/exception.
The only annoying thing is that the changes aren't executed. here is my code :
Dim deEntry As New DirectoryEntry
deEntry.Path = "LDAP://myDomainControl ler"

Dim dsSearch As New DirectorySearch er(deEntry)
dsSearch.Filter = "(&(objectClass =user)(samaccou ntname=" & strLogin
& "*))"
Dim entry As DirectoryEntry = dsSearch.FindOn e.GetDirectoryE ntry
With entry
.Properties("sn ").Value = nieuweMdw.achte rnaam
.Properties("gi venname").Value = nieuweMdw.voorn aam
.Properties("de partment").Valu e = nieuweMdw.afdel ing
.Properties("ti tle").Value = nieuweMdw.funct ie
.Properties("co mpany").Value = nieuweMdw.firma
.Properties("ma il").Value = nieuweMdw.email
.Properties("te lephonenumber") .Value = nieuweMdw.telnr
End With
entry.Authentic ationType = AuthenticationT ypes.Secure
entry.CommitCha nges()
entry.RefreshCa che()
entry.Close()

does anyone see my problem? Thx!

[Marc Scheuner [MVP ADSI]]

>i've written some code that changes the user information (eg givenname, sn,

department, ...) from a user in AD. The code runs without an error/exception.
The only annoying thing is that the changes aren't executed. here is my code :
does anyone see my problem? Thx!

One word: permissions.

In a web environment, you almost HAVE to bind to the root of your AD
directory search with explicit credentials - otherwise you don't have
permissions to update your AD. Also, in many cases, you would need to
specify the actual domain controller to bind to in order to get
results.

So something like this (this is C# - transforms easily into VB.NET):

DirectoryEntry deRootDSE = new DirectoryEntry( "LDAP://RootDSE");
string sRootDN =
deRootDSE.Prope rties["defaultNamingC ontext"].Value.ToString ();

DirectoryEntry deSearchRoot = new
DirectoryEntry( "LDAP://myDC01.mydomain .com/" + sRootDN, "your user
name here", "your password", AuthenticationT ypes.Secure);

DirectorySearch er dsSearch = new DirectorySearch er(deSearchRoot );

If that doesn't help - you might want to post to
microsoft.publi c.adsi.general - that's where all the AD programming
gurus hang out (tons of them with much more VB.NET and web experience
than myself).

Marc