Re: Does IsInRole() grab just Groups? Can I get Organizational Units?

From: Patrick.O.Ige (naijacoder_at_hotmail.com)
Date: 10/31/05 

Date: Mon, 31 Oct 2005 15:45:43 +1100

Hmm.. As Joe Adviced i don't think u need OU's
What you need i think is ROLES.
Patrick

"Joe Kaplan (MVP - ADSI)" <joseph.e.kaplan@removethis.accenture.com> wrote
in message news:eiwxrJ9sFHA.3328@TK2MSFTNGP11.phx.gbl...
> Yes, you must do an LDAP query to get OU information. This seems like a
> weird thing to do though. Are you sure you need this?
>
> OUs are typically created to organize users for group policy and
delegation
> of administration. Making security decisions based on a user's OU isn't
the
> intent.
>
> Joe K.
>
> "Craig Vedur" <CraigVedur@discussions.microsoft.com> wrote in message
> news:B87AF8FB-0B9C-40EF-9DD5-F978F3C37CD6@microsoft.com...
> > Hey,
> >
> > I posted before about IsInRole and was told if you do Windows
> > Authentication
> > with Identity Impersonation, you can check against security groups.
> > However,
> > the LDAP is separated into Organizational Units. I did a test and am
> > assuming IsInRole() will not test for OU membership? Can anyone confirm
> > this?
> >
> > I guess the only way to check for OU membership is to traverse a
> > DirectoryEntry root w/ System.DirectoryServices.dll
> >
> > Can anyone help w/ this?
> >
> > Thanks
>
>

Relevant Pages

  • Re: Does IsInRole() grab just Groups? Can I get Organizational Units?
    ... you must do an LDAP query to get OU information. ... Making security decisions based on a user's OU isn't the ... > assuming IsInRole() will not test for OU membership? ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: User account access after account disable?
    ... thanks Joe ... So does that mean the ONLY way to validate group membership is via ldap calls? ... >> or does disabling also prevent other ...
    (microsoft.public.windows.server.active_directory)
  • Re: User account access after account disable?
    ... LDAP calls are not the only way to check group membership and are in fact ... This is how Windows does it and no LDAP is involved at all. ... You just can't log in with the account if it is ... >>> or does disabling also prevent other ...
    (microsoft.public.windows.server.active_directory)
  • Re: LDAP returns wrong members
    ... users who are  members of the group via primary group membership. ... to get the user's full security membership via LDAP by reading the ... Co-author of "The .NET Developer's Guide to Directory Services Programming"http://www.directoryprogramming.net ...
    (microsoft.public.windows.server.active_directory)
  • Re: Querying AD Groups
    ... LDAP or WinNT provider. ... When I query Global Groups for their memberships I ... The WinNT provider never exposes nested groups, ... In both cases LDAP does not expose membership ...
    (microsoft.public.win2000.active_directory)