从Active Directory查询用户的组成员身份

Question

I wanted to know if there's a fast way to query information from Active Directory.

Specifically, I'm trying to query the current user's "member of" groups which starts with a given string, say "abc-" for example.

If any one can help me I would really appreciate it.

Answer 1

Linq to ActiveDirectory是您可以考虑的选项。

Answer 2

You can do it in different ways, Managing Directory Security Principals in the .NET Framework 3.5 helps you this way:

static void Main(string[] args)
{
  /* Retreiving a principal context
   */
  PrincipalContext domainContext = new PrincipalContext(ContextType.Domain, "WM2008R2ENT", "dc=dom,dc=fr", "TheUser", "ThePassword");

  /* Discribe the group You are looking for as a principal
   */
  GroupPrincipal gpPrincipal = new GroupPrincipal(domainContext);
  gpPrincipal.Name = "abc-*";

  /* Bind a searcher
   */
  PrincipalSearcher searcher = new PrincipalSearcher();
  searcher.QueryFilter = gpPrincipal;

  PrincipalSearchResult<Principal> hRes = searcher.FindAll();

  /* Read The result
   */
  foreach (GroupPrincipal grp in hRes)
  {
    Console.WriteLine(grp.Name);
    // You are looking for "grp.Members"
  }

  Console.ReadLine();
}

I hope it helps.