adding to local

[rodchar]

hey all,

what's the best way to automate adding a user to local group on the computer
and have it be part of administrators?

thanks,
rodchar

[Crouchie1998]

Hi!

You're in luck, as I wrote this function just over a week ago

Add a reference to the System.Director yServices (DLL)

Imports System.Director yServices

Private Enum ADSI_Flags
ADS_UF_SCRIPTAD S_UF_SCRIPT = 1
ADS_UF_ACCOUNTD ISABLEADS_UF_AC COUNTDISABLE = 2
ADS_UF_HOMEDIR_ REQUIREDADS_UF_ HOMEDIR_REQUIRE D = 8
ADS_UF_LOCKOUTA DS_UF_LOCKOUT = 16
ADS_UF_PASSWD_N OTREQDADS_UF_PA SSWD_NOTREQD = 32
ADS_UF_PASSWD_C ANT_CHANGEADS_U F_PASSWD_CANT_C HANGE = 64

ADS_UF_ENCRYPTE D_TEXT_PASSWORD _ALLOWEDADS_UF_ ENCRYPTED_TEXT_ PASSWORD_ALLOWE D
= 128
ADS_UF_TEMP_DUP LICATE_ACCOUNTA DS_UF_TEMP_DUPL ICATE_ACCOUNT = 256
ADS_UF_NORMAL_A CCOUNTADS_UF_NO RMAL_ACCOUNT = 512
ADS_UF_INTERDOM AIN_TRUST_ACCOU NTADS_UF_INTERD OMAIN_TRUST_ACC OUNT =
2048
ADS_UF_WORKSTAT ION_TRUST_ACCOU NTADS_UF_WORKST ATION_TRUST_ACC OUNT =
4096
ADS_UF_SERVER_T RUST_ACCOUNTADS _UF_SERVER_TRUS T_ACCOUNT = 8192
ADS_UF_DONT_EXP IRE_PASSWDADS_U F_DONT_EXPIRE_P ASSWD = 65536
ADS_UF_MNS_LOGO N_ACCOUNTADS_UF _MNS_LOGON_ACCO UNT = 131072
ADS_UF_SMARTCAR D_REQUIREDADS_U F_SMARTCARD_REQ UIRED = 262144
ADS_UF_TRUSTED_ FOR_DELEGATIONA DS_UF_TRUSTED_F OR_DELEGATION = 524288
ADS_UF_NOT_DELE GATEDADS_UF_NOT _DELEGATED = 1048576
ADS_UF_USE_DES_ KEY_ONLYADS_UF_ USE_DES_KEY_ONL Y = 2097152
ADS_UF_DONT_REQ UIRE_PREAUTHADS _UF_DONT_REQUIR E_PREAUTH = 4194304
ADS_UF_PASSWORD _EXPIREDADS_UF_ PASSWORD_EXPIRE D = 8388608

ADS_UF_TRUSTED_ TO_AUTHENTICATE _FOR_DELEGATION ADS_UF_TRUSTED_ TO_AUTHENTICATE _
FOR_DELEGATION = 16777216
End Enum

Private Function AddUser(ByVal sLogin As String, ByVal sPassword As
String) As Boolean ', ByVal sGroup As String) As Boolean
Dim dirEntry As DirectoryEntry
dirEntry = New DirectoryEntry( "WinNT://" + Environment.Mac hineName +
",computer" )

Dim entries As DirectoryEntrie s = dirEntry.Childr en

' Set login name and full name.
Dim newUser As DirectoryEntry = entries.Add(sLo gin, "User")
Try
'newUser.Proper ties("FullName" ).Add(fullName)
'newUser.Proper ties("HomeDirec tory").Add("C:\ TestDirectory")
newUser.Propert ies("Descriptio n").Add("My User's Description
Here")

' User must change password at next logon (1 - true, 0 - false)
newUser.Propert ies("PasswordEx pired").Add(0)

' Password never expires.
'newUser.Proper ties("PasswordA ge").Add(0)

' Set flags - User Cannot change password | Password never
expires.

newUser.Propert ies("Userflags" ).Add(ADSI_Flag s.ADS_UF_PASSWD _CANT_CHANGEADS _
UF_PASSWD_CANT_ CHANGE Or
ADSI_Flags.ADS_ UF_DONT_EXPIRE_ PASSWDADS_UF_DO NT_EXPIRE_PASSW D)
'newUser.Proper ties("Userflags ").Add(&H40 Or &H10000)
'newUser.Proper ties("Userflags ").Add(64 Or 65536)

' Set the password.
Dim result As Object = newUser.Invoke( "SetPasswor d", sPassword)

newUser.CommitC hanges()

' Add user to the group "Members"
Dim grp As DirectoryEntry =
dirEntry.Childr en.Find("Admini strators", "group")
If (Not grp Is Nothing) Then
grp.Invoke("Add ", New Object() {newUser.Path.T oString()})
End If

' Dim usrGroup As DirectoryEntry =
dirEntry.Childr en.Find("Users" , "group")
' If (Not usrGroup Is Nothing) Then
' usrGroup.Invoke ("Add", New Object()
{newUser.Path.T oString()})
' End If

Return True
Catch ex As Exception
Return False
End Try
End Function

Example:
---------

AddUser("My USername Here", "My Password Here")

That will add a user if not already there, otherwise, it will fail

If you remove the commit changes & a few lines above & then use the 'If'
statement to check to see if the user is in the 'Administrators ' group, if
not the line between the 'If' statement will add the user to the
'Administrators ' group.

I hope this helps,

Crouchie1998
BA (HONS) MCP MCSE

[rodchar]

how much different would it be if active directory isn't present?

"Crouchie19 98" wrote:

Hi!

You're in luck, as I wrote this function just over a week ago

Add a reference to the System.Director yServices (DLL)

Imports System.Director yServices

Private Enum ADSI_Flags
ADS_UF_SCRIPTAD S_UF_SCRIPT = 1
ADS_UF_ACCOUNTD ISABLEADS_UF_AC COUNTDISABLE = 2
ADS_UF_HOMEDIR_ REQUIREDADS_UF_ HOMEDIR_REQUIRE D = 8
ADS_UF_LOCKOUTA DS_UF_LOCKOUT = 16
ADS_UF_PASSWD_N OTREQDADS_UF_PA SSWD_NOTREQD = 32
ADS_UF_PASSWD_C ANT_CHANGEADS_U F_PASSWD_CANT_C HANGE = 64

ADS_UF_ENCRYPTE D_TEXT_PASSWORD _ALLOWEDADS_UF_ ENCRYPTED_TEXT_ PASSWORD_ALLOWE D
= 128
ADS_UF_TEMP_DUP LICATE_ACCOUNTA DS_UF_TEMP_DUPL ICATE_ACCOUNT = 256
ADS_UF_NORMAL_A CCOUNTADS_UF_NO RMAL_ACCOUNT = 512
ADS_UF_INTERDOM AIN_TRUST_ACCOU NTADS_UF_INTERD OMAIN_TRUST_ACC OUNT =
2048
ADS_UF_WORKSTAT ION_TRUST_ACCOU NTADS_UF_WORKST ATION_TRUST_ACC OUNT =
4096
ADS_UF_SERVER_T RUST_ACCOUNTADS _UF_SERVER_TRUS T_ACCOUNT = 8192
ADS_UF_DONT_EXP IRE_PASSWDADS_U F_DONT_EXPIRE_P ASSWD = 65536
ADS_UF_MNS_LOGO N_ACCOUNTADS_UF _MNS_LOGON_ACCO UNT = 131072
ADS_UF_SMARTCAR D_REQUIREDADS_U F_SMARTCARD_REQ UIRED = 262144
ADS_UF_TRUSTED_ FOR_DELEGATIONA DS_UF_TRUSTED_F OR_DELEGATION = 524288
ADS_UF_NOT_DELE GATEDADS_UF_NOT _DELEGATED = 1048576
ADS_UF_USE_DES_ KEY_ONLYADS_UF_ USE_DES_KEY_ONL Y = 2097152
ADS_UF_DONT_REQ UIRE_PREAUTHADS _UF_DONT_REQUIR E_PREAUTH = 4194304
ADS_UF_PASSWORD _EXPIREDADS_UF_ PASSWORD_EXPIRE D = 8388608

ADS_UF_TRUSTED_ TO_AUTHENTICATE _FOR_DELEGATION ADS_UF_TRUSTED_ TO_AUTHENTICATE _
FOR_DELEGATION = 16777216
End Enum

Private Function AddUser(ByVal sLogin As String, ByVal sPassword As
String) As Boolean ', ByVal sGroup As String) As Boolean
Dim dirEntry As DirectoryEntry
dirEntry = New DirectoryEntry( "WinNT://" + Environment.Mac hineName +
",computer" )

Dim entries As DirectoryEntrie s = dirEntry.Childr en

' Set login name and full name.
Dim newUser As DirectoryEntry = entries.Add(sLo gin, "User")
Try
'newUser.Proper ties("FullName" ).Add(fullName)
'newUser.Proper ties("HomeDirec tory").Add("C:\ TestDirectory")
newUser.Propert ies("Descriptio n").Add("My User's Description
Here")

' User must change password at next logon (1 - true, 0 - false)
newUser.Propert ies("PasswordEx pired").Add(0)

' Password never expires.
'newUser.Proper ties("PasswordA ge").Add(0)

' Set flags - User Cannot change password | Password never
expires.

newUser.Propert ies("Userflags" ).Add(ADSI_Flag s.ADS_UF_PASSWD _CANT_CHANGEADS _
UF_PASSWD_CANT_ CHANGE Or
ADSI_Flags.ADS_ UF_DONT_EXPIRE_ PASSWDADS_UF_DO NT_EXPIRE_PASSW D)
'newUser.Proper ties("Userflags ").Add(&H40 Or &H10000)
'newUser.Proper ties("Userflags ").Add(64 Or 65536)

' Set the password.
Dim result As Object = newUser.Invoke( "SetPasswor d", sPassword)

newUser.CommitC hanges()

' Add user to the group "Members"
Dim grp As DirectoryEntry =
dirEntry.Childr en.Find("Admini strators", "group")
If (Not grp Is Nothing) Then
grp.Invoke("Add ", New Object() {newUser.Path.T oString()})
End If

' Dim usrGroup As DirectoryEntry =
dirEntry.Childr en.Find("Users" , "group")
' If (Not usrGroup Is Nothing) Then
' usrGroup.Invoke ("Add", New Object()
{newUser.Path.T oString()})
' End If

Return True
Catch ex As Exception
Return False
End Try
End Function

Example:
---------

AddUser("My USername Here", "My Password Here")

That will add a user if not already there, otherwise, it will fail

If you remove the commit changes & a few lines above & then use the 'If'
statement to check to see if the user is in the 'Administrators ' group, if
not the line between the 'If' statement will add the user to the
'Administrators ' group.

I hope this helps,

Crouchie1998
BA (HONS) MCP MCSE

[rodchar]

thanks, this helped.

"Crouchie19 98" wrote:

Hi!

You're in luck, as I wrote this function just over a week ago

Add a reference to the System.Director yServices (DLL)

Imports System.Director yServices

Private Enum ADSI_Flags
ADS_UF_SCRIPTAD S_UF_SCRIPT = 1
ADS_UF_ACCOUNTD ISABLEADS_UF_AC COUNTDISABLE = 2
ADS_UF_HOMEDIR_ REQUIREDADS_UF_ HOMEDIR_REQUIRE D = 8
ADS_UF_LOCKOUTA DS_UF_LOCKOUT = 16
ADS_UF_PASSWD_N OTREQDADS_UF_PA SSWD_NOTREQD = 32
ADS_UF_PASSWD_C ANT_CHANGEADS_U F_PASSWD_CANT_C HANGE = 64

ADS_UF_ENCRYPTE D_TEXT_PASSWORD _ALLOWEDADS_UF_ ENCRYPTED_TEXT_ PASSWORD_ALLOWE D
= 128
ADS_UF_TEMP_DUP LICATE_ACCOUNTA DS_UF_TEMP_DUPL ICATE_ACCOUNT = 256
ADS_UF_NORMAL_A CCOUNTADS_UF_NO RMAL_ACCOUNT = 512
ADS_UF_INTERDOM AIN_TRUST_ACCOU NTADS_UF_INTERD OMAIN_TRUST_ACC OUNT =
2048
ADS_UF_WORKSTAT ION_TRUST_ACCOU NTADS_UF_WORKST ATION_TRUST_ACC OUNT =
4096
ADS_UF_SERVER_T RUST_ACCOUNTADS _UF_SERVER_TRUS T_ACCOUNT = 8192
ADS_UF_DONT_EXP IRE_PASSWDADS_U F_DONT_EXPIRE_P ASSWD = 65536
ADS_UF_MNS_LOGO N_ACCOUNTADS_UF _MNS_LOGON_ACCO UNT = 131072
ADS_UF_SMARTCAR D_REQUIREDADS_U F_SMARTCARD_REQ UIRED = 262144
ADS_UF_TRUSTED_ FOR_DELEGATIONA DS_UF_TRUSTED_F OR_DELEGATION = 524288
ADS_UF_NOT_DELE GATEDADS_UF_NOT _DELEGATED = 1048576
ADS_UF_USE_DES_ KEY_ONLYADS_UF_ USE_DES_KEY_ONL Y = 2097152
ADS_UF_DONT_REQ UIRE_PREAUTHADS _UF_DONT_REQUIR E_PREAUTH = 4194304
ADS_UF_PASSWORD _EXPIREDADS_UF_ PASSWORD_EXPIRE D = 8388608

ADS_UF_TRUSTED_ TO_AUTHENTICATE _FOR_DELEGATION ADS_UF_TRUSTED_ TO_AUTHENTICATE _
FOR_DELEGATION = 16777216
End Enum

Private Function AddUser(ByVal sLogin As String, ByVal sPassword As
String) As Boolean ', ByVal sGroup As String) As Boolean
Dim dirEntry As DirectoryEntry
dirEntry = New DirectoryEntry( "WinNT://" + Environment.Mac hineName +
",computer" )

Dim entries As DirectoryEntrie s = dirEntry.Childr en

' Set login name and full name.
Dim newUser As DirectoryEntry = entries.Add(sLo gin, "User")
Try
'newUser.Proper ties("FullName" ).Add(fullName)
'newUser.Proper ties("HomeDirec tory").Add("C:\ TestDirectory")
newUser.Propert ies("Descriptio n").Add("My User's Description
Here")

' User must change password at next logon (1 - true, 0 - false)
newUser.Propert ies("PasswordEx pired").Add(0)

' Password never expires.
'newUser.Proper ties("PasswordA ge").Add(0)

' Set flags - User Cannot change password | Password never
expires.

newUser.Propert ies("Userflags" ).Add(ADSI_Flag s.ADS_UF_PASSWD _CANT_CHANGEADS _
UF_PASSWD_CANT_ CHANGE Or
ADSI_Flags.ADS_ UF_DONT_EXPIRE_ PASSWDADS_UF_DO NT_EXPIRE_PASSW D)
'newUser.Proper ties("Userflags ").Add(&H40 Or &H10000)
'newUser.Proper ties("Userflags ").Add(64 Or 65536)

' Set the password.
Dim result As Object = newUser.Invoke( "SetPasswor d", sPassword)

newUser.CommitC hanges()

' Add user to the group "Members"
Dim grp As DirectoryEntry =
dirEntry.Childr en.Find("Admini strators", "group")
If (Not grp Is Nothing) Then
grp.Invoke("Add ", New Object() {newUser.Path.T oString()})
End If

' Dim usrGroup As DirectoryEntry =
dirEntry.Childr en.Find("Users" , "group")
' If (Not usrGroup Is Nothing) Then
' usrGroup.Invoke ("Add", New Object()
{newUser.Path.T oString()})
' End If

Return True
Catch ex As Exception
Return False
End Try
End Function

Example:
---------

AddUser("My USername Here", "My Password Here")

That will add a user if not already there, otherwise, it will fail

If you remove the commit changes & a few lines above & then use the 'If'
statement to check to see if the user is in the 'Administrators ' group, if
not the line between the 'If' statement will add the user to the
'Administrators ' group.

I hope this helps,

Crouchie1998
BA (HONS) MCP MCSE

[Crouchie1998]

Pleasure

Crouchie1998
BA (HONS) MCP MCSE