Sometimes it is required to get users information from remote
server’s Active Directory. You may need to fetch some Groups of Active
Directory. Here are sample codes which can help you.
Get all the users from AD specific group and fetch their information using
Group Principal
private static void GroupSearch()
{
Console.WriteLine("Start Group
Search");
try
{
PrincipalContext principalctx = new PrincipalContext(ContextType.Domain, YourServer/YourDomain, YourUserName, YourPassword);
GroupPrincipal groupprinciple = GroupPrincipal.FindByIdentity(principalctx, IdentityType.Name,
GroupName);
if (groupprinciple != null)
{
foreach (Principal innerprincipal in groupprinciple.GetMembers(false))
{
try
{
Console.WriteLine(((System.DirectoryServices.AccountManagement.UserPrincipal)(innerprincipal)).GivenName);
Console.WriteLine(((System.DirectoryServices.AccountManagement.UserPrincipal)(innerprincipal)).Surname);
Console.WriteLine(innerprincipal.SamAccountName);
Console.WriteLine(((System.DirectoryServices.AccountManagement.UserPrincipal)(innerprincipal)).EmailAddress);
Console.WriteLine(((System.DirectoryServices.AccountManagement.AuthenticablePrincipal)(innerprincipal)).Enabled
?? false);
}
catch (Exception exe)
{
}
}
groupprinciple.Dispose();
principalctx.Dispose();
}
}
catch (Exception ex)
{
}
Console.WriteLine("End of Group
Search");
}
Achieve same using Directory Searcher object with LDAP command
private static void LDAP()
{
try
{
string DomainPath = "LDAP://YourIP/dc=yourDomain,dc=yourDomainExtension";
DirectoryEntry searchRoot = new DirectoryEntry(DomainPath, "yourUserName", "yourPassword",AuthenticationTypes.Secure);
DirectorySearcher search = new DirectorySearcher(searchRoot);
search.Filter = ((memberOf=CN=YourGroupName,OU=YourDirectoryHierarchy, dc=yourDomain,dc=yourDomainExtension))";
search.PropertiesToLoad.Add("samaccountname");
search.PropertiesToLoad.Add("mail");
search.PropertiesToLoad.Add("userAccountControl");
search.PropertiesToLoad.Add("displayname");//first name
SearchResult result;
SearchResultCollection resultCol = search.FindAll();
if (resultCol != null)
{
for (int counter = 0; counter <
resultCol.Count; counter++)
{
string UserNameEmailString
= string.Empty;
result =
resultCol[counter];
if (result.Properties.Contains("displayname"))
{
Console.WriteLine((String)result.Properties["displayname"][0]);
}
if (result.Properties.Contains("samaccountname"))
{
Console.WriteLine((String)result.Properties["samaccountname"][0]);
}
if (result.Properties.Contains("mail"))
{
Console.WriteLine((String)result.Properties["mail"][0]);
}
if (result.Properties.Contains("userAccountControl"))
{
//Property check status of user
}
}
}
}
catch (Exception ex)
{
}
Console.WriteLine("END Start
LDAP");
}
If you want to search all the users from root AD change bellow code from above lines:
search.Filter = "(&(objectClass=user)(objectCategory=person))";
If you want to get one user information change bellow code from above lines:
search.Filter = "(&(objectClass=user)(objectCategory=person)
(sAMAccountName=yourUserName))";
Hope this sample codes help you!
