C＃通讯组列表属性（活动目录）

Question

嗨，我正在尝试使用LDAP更新我的通讯组列表管理员，并且我需要知道“管理员可以更新成员列表”复选框的属性是什么，我只想使用c＃NOT vbs或powershell可以更新菜单，但是我更喜欢你写它为例..

Answer 1

The simple answer is there is no attribute for the "Manager can update membership list" checkbox, the check box is a security setting. When you check it the security of the group is modified to include the manager with the required permissions, unticking removes the managers rights under the security tab to modify the group.

You can use the ObjectSecurity to see if a SID has a unique ACL entry, in a standard environment this should be enough. This code should give you an idea of how to do it.

NTAccount acc = new NTAccount(managersam); 
SecurityIdentifier sid = (SecurityIdentifier)acc.Translate(typeof(SecurityIdentifier)); 
ActiveDirectorySecurity sdc = YourGroupObject.ObjectSecurity; 
AuthorizationRuleCollection arc= sdc.GetAccessRules(true, false, Type.GetType("System.Security.Principal.SecurityIdentifier")); 
foreach (AuthorizationRule ar in arc) {
   if (ar.IdentityReference== sid
   {
     managercanedit= true;
   }
 }