Web page to enumerate groups in active directory

9 New Member

I found a file on the web that will allow you to enumerate groups but it was an .hta and the top level admins won't allow this. I need to give managers access to the groups so that when a new user is created they can tell me who they want their account to be modeled after. The html app works great as a .hta file but when it is saved as a web page it won't list the members of any groups. I get an error on line 182: "ActiveX component can't create object: 'GetObject'" Here is the line that throws the error: "Set objRootDSE = GetObject("LDAP ://RootDSE")" Here is the code:
[html]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<title>Group Enumerator</title>
<style type="text/css">
/* Default CSS Stylesheet for a new Web Application project */
body{background-color:#cdd4e6; margin:20 20 20 0; color:#444444;}
td{font-family:Arial, Helvetica, sans-serif; font-size:11px;}
select{font-family:Arial, Helvetica, sans-serif; font-size:11px;}
input{font-family:Arial, Helvetica, sans-serif; font-size:11px;}
a{font-family:Arial, Helvetica, sans-serif; font-size:11px;color :#444444;}
/* Custom */
td.header{backg round-color:#7f92bf; color:#ffffff; font-size: 20px; padding-left:15px;}
td.content{padd ing:15 15 15 15; background-color:#ffffff;}
td.title{color: #7f92bf; font-size:10px;}
td.error{color: #ff0000}
/* Tabs */
a.tablink{font-weight:bold;tex t-decoration:none ;}
.tabline{border-bottom:1px solid #CCCCCC}
.tab{border-top:1px solid #CCCCCC;border-right:1px solid #CCCCCC;border-bottom:1px solid #CCCCCC;padding :3 5 3 5;border-left:1px solid #CCCCCC;backgro und-color:#eeeeee}
.tabactive{bord er-top:1px solid #CCCCCC;border-right:1px solid #CCCCCC; border-left:1px solid #CCCCCC;padding :3 5 3 5;}
/* Grid */
td.gridheader{p adding:3 3 3 3; font-weight:bold; background-color:#eeeeee;}
td.gridcell{pad ding:3 3 3 3;border-bottom:1px solid #eeeeee}
</style>
[/html]

Expand|Select|Wrap|Line Numbers

 
<script language="VBScript">

    Const DOMAIN                 = "luiginos.com" 

    'ou's to ignore when making groups available security related or obsolete

'    Const OUS_TO_IGNORE            = "OU=this,OU=that,OU=theother,DC=WINDOWSITPRO,DC=tld OU=obsolete,DC=WINDOWSITPRO,DC=tld"

    Const OUS_TO_IGNORE            = ""

    Dim Searchtype

    Dim strUserName

    Dim objUser

    Dim bUserLoaded

    Dim arrUserGroups

    Dim    intSecCount 

    Dim intDistCount    

    Dim strGroupChosen

    bUserLoaded = False

' ======= Standardized Arrays 

    Dim arrSecGroup(500)

    Dim arrDistGroup(500)
 
Sub window_Onload

    Const ADS_SCOPE_SUBTREE = 2

    Const ADS_GROUP_TYPE_SECURITY_ENABLED = &h80000000

    Set objConnection = CreateObject("ADODB.Connection")

    Set objCommand =   CreateObject("ADODB.Command")

    objConnection.Provider = "ADsDSOObject"

    objConnection.Open "Active Directory Provider"

    Set objCommand.ActiveConnection = objConnection

    objCommand.Properties("Page Size") = 1000

    objCommand.Properties("Searchscope") = ADS_SCOPE_SUBTREE 

    objCommand.Properties("Sort On") = "name"

    objCommand.CommandText = _

        "<LDAP://" & DOMAIN & ">;(&(objectCategory=GROUP));Name,grouptype,distinguishedName;Subtree"  

    Set objRecordSet = objCommand.Execute

    objRecordSet.MoveFirst

    intSecCount = 1

    intDistCount = 1

    Do Until objRecordSet.EOF

        tmpDGN = objRecordSet.Fields("distinguishedName").Value

        If      InStr(1,OUS_TO_IGNORE,Right(tmpDGN, Len(tmpDGN) - InStr(1,tmpDGN,",",1)),1) = 0  Then

            If  objRecordSet.Fields("Grouptype").Value And ADS_GROUP_TYPE_SECURITY_ENABLED  Then    

                arrSecGroup(intSecCount) = objRecordSet.Fields("Name").Value

                intSecCount = intSecCount + 1

            Else

                arrDistGroup(intDistCount) = objRecordSet.Fields("Name").Value

                intDistCount = intDistCount + 1

            End If

        End If 

        objRecordSet.MoveNext

    Loop

    'fill up group boxes

     FillGroups arrSecGroup,     intSecCount,  document.all.boxSecurity

     FillGroups arrDistGroup, intdistCount, document.all.boxDistribution

    Set objConnection = Nothing

    Set objCommand = Nothing

    Set objRecordSet = Nothing

End Sub
 
    Sub StartUserHTA

        Set WshShell = CreateObject("WScript.Shell")

        strCmdLine = ".\HD-Dash-USER.hta"

        WSHShell.Run strCmdLine,8    

    End Sub
 
Sub Get_Distribution

    document.all.boxSecurity.SelectedIndex = Null

    For Each objOption In document.all.objMembership.Options

        objOption.RemoveNode

    Next 

    strGroupChosen = "Distribution group - " & arrDistGroup(document.all.boxdistribution.selectedIndex)

    EnumMembers arrDistGroup(document.all.boxdistribution.selectedIndex), "", ""

End Sub
 
Sub Get_Security

    document.all.boxdistribution.SelectedIndex = Null

    For Each objOption In document.all.objMembership.Options

        objOption.RemoveNode

    Next 

    strGroupChosen = "Security group - " & arrSecGroup(document.all.boxSecurity.selectedIndex)

    EnumMembers arrSecGroup(document.all.boxSecurity.selectedIndex), "", ""

End Sub
 
' What: Fills in Group boxes both Security and ditribution

' Input: arrGroup is the array to fill with, intGroupCount is how many itmes in the array and PaneName

'            is where the information should be place

' output:     Security and distrubution panes are filled.
 
    Sub FillGroups (arrGroup, intGroupCount, PaneName)

        For Each objOption In PaneName.Options

            objOption.RemoveNode

        Next 

        Set objOption = document.createElement("OPTION")

        objOption.Text = "<CHOOSE A GROUP>"

        objOption.Value = 0 

        PaneName.Add(objOption)

        For intIncrement = 1 To intGroupCount

            If arrGroup(intIncrement) <> "" Then 

                        Set objOption = document.createElement("OPTION")

                        objOption.Text = arrGroup(intIncrement)

                        objOption.Value = i 

                        PaneName.Add(objOption)

            End If

        Next 

        Set objOption = Nothing 

    end Sub
 
Sub EnumMembers(strName, strOffset, strGOffset)

' Recursive subroutine to enumerate members of a group,

' including nested group memberships.

    Dim strFilter, strQuery, objRecordSet, k, objMember, objCommand

    Dim strDN, intCount, blnLast, intLowRange, objConnection

    Dim intHighRange, intRangeStep, objField

    Dim iCount, objGroup, strAttributes

    Dim  strNTName, objRootDSE, strDNSDomain 

    Dim  strBase, objGroupList

    Dim objMemList

     strAttributes = "member, sn"

    If strGOffset = "" Then

        strGOffset = "+"

    End If 

     Set objRootDSE = GetObject("LDAP://RootDSE")

    strBase = "<LDAP://" & objRootDSE.Get("DefaultNamingContext") & ">"

  ' Filter on objects of class "group" and specified name.

      strFilter = "(&(ObjectCategory=group)" & "(ObjectClass=group)" & "(Name=" & strName & "))"

    strQuery = strBase & ";" & strFilter & ";" & strAttributes & ";subtree"

' Use ADO to search Active Directory.

    Set objCommand = CreateObject("ADODB.Command")

    Set objConnection = CreateObject("ADODB.Connection")

    objConnection.Provider = "ADsDSOObject"

    objConnection.Open = "Active Directory Provider"

    objCommand.ActiveConnection = objConnection

    objCommand.Properties("Page Size") = 100

    objCommand.Properties("Sort On") = "sn"

    objCommand.Properties("Timeout") = 30

    objCommand.Properties("Cache Results") = False

    objCommand.CommandText = strQuery

    Set objRecordSet = objCommand.Execute

    Do Until objRecordSet.EOF

        For Each objField In objRecordSet.Fields

            If IsArray(objField.Value) Then

                objMemList = SingleSorter(objField.Value)

                i = 1

                  For Each strDN In objMemList

                    Set objGroup = GetObject("LDAP://" & strDN & "")

                    IF LCase(objGroup.Class) = "group" Then

                         Set objOption = document.createElement("OPTION")

                         objOption.Text = strGOffset & objGroup.cn

                         objOption.Value = objGroup.cn 

                         document.all.objMembership.Add(objOption)

                         strOffset = strOffset + "-"

                         strGOffset = strGOffset + "+"

                        Call EnumMembers(objGroup.cn, strOffset, strGOffset)

                    Else

                         Set objOption = document.createElement("OPTION")

                         objOption.Text = strOffset & objGroup.cn

                         objOption.Value = objGroup.cn 

                         document.all.objMembership.Add(objOption)

                    END If

                    intCount = intCount+1

                       iCount=iCount+1

                  Next

              End If

        Next

      objRecordSet.MoveNext

    Loop

    If strOffset  <> "" Then

        strOffset = Right(strOffset, Len(strOffset) - 1)

    End If

    If strGOffset  <> "" Then

        strGOffset = Right(strGOffset, Len(strGOffset) - 1)

    End If

End Sub
 
</script>

[html]
<form id="frmPage" action="">
<table width="100%" height="100%" border="0" cellpadding="0" cellspacing="0" >
<tr>
<td height="50" class="header"> Group Enumerator</td>
</tr>
<tr>
<td class="content" height="100%" valign="top">
<table cellSpacing="0" cellPadding="0" border="1">
<tr>
<td class="title">D istribution Groups</td>
<td class="title">S ecurity Groups</td>
<td class="title">G roup Membership</td>
</tr>
<tr>
<td class="title"> <select size="20" name="boxDistri bution" onChange="vbscr ipt:Get_Distrib ution"></select></td>
<td class="title"> <select size="20" name="boxSecuri ty" onChange="vbscr ipt:Get_Securit y"></select></td>
<td class="title"> <select size="20" name="objMember ship" ></select></td>
</tr>
</td>
</table>
<table cellSpacing="0" cellPadding="0" border="0">
<tr>
<td>
<input id=QuitButton class="button" type="button" value="Quit" name="Quit_butt on" onClick="Quit_H TA">
</td>
<td>

</td>
<td>

</td>
<td>
<input id=MemButton class="button" type="button" value="Export Results" name="Mem_butto n" onClick="PopExc elGroups">
</td>
</tr>
</table>
</form>
</body>
</html>
[/html]

Mar 27 '07 #1

Subscribe Reply

2505

Similar topics

6626

list groups and users of NT domain

by: Marko Faldix | last post by:

Hello, I am looking for a language to achieve lists of all NT users and groups of a given NT domain on a Windows 2000 Server. It has to run within a webscript, so vbscript with windows scripting host is considered first. But before I dive into this, isn't it possible to do it with win32all? An ideal result would be something like the listings one get while changing file permissions on a file on a NT machine. I think, this extends too...

Python

5893

REPOST: User add Printers via Web page?

by: Aaron_TekRecycle.com | last post by:

Someone must have done this before?!? I have VBS code that will Enumerate all the Printers in the AD and Add the Printer Connection to the client... I'm just not a web developer so I need some example code or hand-holding on the web integration portion. Anyone? "Aaron_TekRecycle.com" <aaron_NAME@DOMAIN_tekrecycle.com> wrote in message

ASP / Active Server Pages

2048

Enumerate Domain

by: Jeff Grundy | last post by:

How do I enumerate the machines domain, then enumerate the shares of a machine?

.NET Framework

1316

Cannot Enumerate Global Groups

by: news | last post by:

I have one Active Directory Group that contains users and groups objects. I need recursively call my function to get all users that are in the group and subgroups. All is working fine, when i select as first group an Domain Local Group. In case I select Domain Global Group, something is wrong. I get only one user, or any user.... What to do?

C# / C Sharp

2910

AD groups in ASP.NET project

by: Daniel G | last post by:

Hello, I am working at a ASP.NET project that uses authenticate/authorize via Active Directory. There are many groups with different roles. I am unable to 'see' a solution for this kind of error : - for a specific user X ( that belongs to group G1 and G2) this call : DirectoryEntry.Invoke("Groups")

ASP.NET

1234

Active Directory. finding groups of groups

by: RTT | last post by:

i can search the active directory to find the groups and i can search users and find out of what groups he's a member. But now i have to find a group, and find out what groups he's a member of, but i don't know where to start.... anybody who has an idea? thxs in advance

Visual Basic .NET

1717

Binding ASCX in Master Page to theme

by: damiensawyer | last post by:

Hello all, I'm very new to all of this. I have a theme and a skin (the standard ones). I have a standard master page which is holding a custom ascx which has a treeview in it. Can someone please point me in the right direction to bind a theme to the treeview? The 'theme' tag is on the <%@ page %> directive... however neither my master page or ASCX files use this. They use <%Master%> and

ASP.NET

4816

enumerate active directory groups using vb.net

by: interuser | last post by:

Hi I want to enumerate all groups of an active directory. How do I do that? Thanks

Visual Basic .NET

2761

How to check users against security groups in Active Directory

by: rote | last post by:

My sceanrio is this on an asp.net 2.0 freamework. I want to use any of the data controls e.g Gridview,DetailView etc.. But i want some buttons e.g update,edit save etc to be enable or disabled based on if they belong to some security groups in active directory. I'm looking for the best options for this because i want to store those security groups somewhere and then check for the user against those security groups for their authorisation...

ASP.NET

8984

What is ONU?

by: marktang | last post by:

ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...

General

8823

Changing the language in Windows 10

by: Hystou | last post by:

Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...

Windows Server

9363

Maximizing Business Potential: The Nexus of Website Design and Digital Marketing

by: jinu1996 | last post by:

In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...

Online Marketing

9312

The easy way to turn off automatic updates for Windows 10/11

by: Hystou | last post by:

Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...

Windows Server

9238

Discussion: How does Zigbee compare with other wireless protocols in smart home applications?

by: tracyyun | last post by:

Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...

General

6793

Access Europe - Using VBA to create a class based on a table - Wed 1 May

by: isladogs | last post by:

The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...

Microsoft Access / VBA

6073

Couldn’t get equations in html when convert word .docx file to html file in C#.

by: conductexam | last post by:

I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...

C# / C Sharp

4593

Trying to create a lan-to-lan vpn between two differents networks

by: TSSRALBI | last post by:

Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...

Networking - Hardware / Configuration

2206

Comprehensive Guide to Website Development in Toronto: Expert Insights from BSMN Consultancy

by: bsmnconsultancy | last post by:

In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

General