C＃使用目录服务将用户添加到Active Directory，启用属性不起作用

Question

I'm using C# to create new active directory accounts on the fly, like this:

        public static void CreateUser(string userName, string password){
            UserPrincipal user = new UserPrincipal(ContextType.Domain);
            user.SetPassword(password);
            user.Name = userName;
            user.SamAccountName = userName;
            user.UserPrincipalName = userName;
            user.Enabled = true;
            user.Save();
        }

The trouble is, the user.Enabled = true; line doesn't appear to do anything. The account is created successfully, but I still have to manually go into the account using AD explorer and set it to enabled.

What could be wrong here?

Answer 1

In order for a user account to be Enabled in Active Directory, it must have a password. Set the password and create the account object first, then enable it subsequently:

public static void CreateUser(string userName, string password){
    UserPrincipal user = new UserPrincipal(ContextType.Domain);
    user.SetPassword(password);
    user.Name = userName;
    user.SamAccountName = userName;
    user.UserPrincipalName = userName;
    user.Save();

    // Now that the account has been created and has a password, you can enable it
    user.Enabled = true;
    user.Save();
}