Active directory Question
-
-
i have a program that authenticated users with Active directory how do i query AD to find out when is the last time a user was authenicated i trided using last logon time but this is only updated when they log on to the computer not when the authenticate
lastlogon is notorious in fact it doesn't even replicate if you have more than one DC. Try lastlogontimestamp. However this only works with 2003 server and above, and they have to be in the correct 2003 Domain mode. No 2000 servers. Otherwise it's lastlogon and checking all the servers. and even then it might not be accurate.
Using the wrong tool for the job is half the fun.
-
i have a program that authenticated users with Active directory how do i query AD to find out when is the last time a user was authenicated i trided using last logon time but this is only updated when they log on to the computer not when the authenticate
Login Using Active Directory Services (ADS) In order to use SDS, first we have to set properties of LDAP server. Here database ADSI_PARAMETER table is used to set the LDAP properties. CREATE TABLE [dbo].[ADSI_PARAMETER] ( [ParameterName] [varchar] (50) COLLATE SQL_Latin1_General_CP1_CI_AS NOT NULL, [ParameterValue] [varchar] (50) COLLATE SQL_Latin1_General_CP1_CI_AS NOT NULL ) ON [PRIMARY] GO Enter following data to table in ParameterName and ParameterValue fields Parameter Name ParameterValue ServerName WindowsDomainServer BaseDN DC=DomainName,DC=COM UserDN OU=Users GroupName CN=Operater, OU=Groups AccountFilter sAMAccountName Where ServerName is your domain server machine name. BaseDN is your domain name, most of the time it is company name. UserDN is organizational unit where user should exist. GroupName is organizational unit, to which user should belong in order to access your software. AccountFilter is filter for account name; mostly it is sAMAccountName in windows. Code for GetADSILogin function. public void GetADSILogin() { try { string strServerName = ""; string strBaseDN = "" ; string strUserDN = ""; string strGroupName = ""; string strAccountFilter = ""; //Port no for LDAP Default is 389 string strPortNo = "389"; Boolean blnGroupUser=false; //Data source string string source = "Data Source=ATHAKUR;Initial Catalog=Times;user=sa;password=sa" ; //SQL statement that will be issued string select = "SELECT * from ADSI_PARAMETER"; //SQL Connection SqlConnection conn=new SqlConnection(source); // Open the database connection conn.Open () ; // Create the SQL command... SqlCommand cmd = new SqlCommand ( select , conn ) ; //Execute Data reader SqlDataReader myReader = cmd.ExecuteReader(); //Check if any rows return against user/pass if(myReader.HasRows) { while(myReader.Read()) { //Store the parameter's data in variables string strParameterName = myReader.GetSt
-
Login Using Active Directory Services (ADS) In order to use SDS, first we have to set properties of LDAP server. Here database ADSI_PARAMETER table is used to set the LDAP properties. CREATE TABLE [dbo].[ADSI_PARAMETER] ( [ParameterName] [varchar] (50) COLLATE SQL_Latin1_General_CP1_CI_AS NOT NULL, [ParameterValue] [varchar] (50) COLLATE SQL_Latin1_General_CP1_CI_AS NOT NULL ) ON [PRIMARY] GO Enter following data to table in ParameterName and ParameterValue fields Parameter Name ParameterValue ServerName WindowsDomainServer BaseDN DC=DomainName,DC=COM UserDN OU=Users GroupName CN=Operater, OU=Groups AccountFilter sAMAccountName Where ServerName is your domain server machine name. BaseDN is your domain name, most of the time it is company name. UserDN is organizational unit where user should exist. GroupName is organizational unit, to which user should belong in order to access your software. AccountFilter is filter for account name; mostly it is sAMAccountName in windows. Code for GetADSILogin function. public void GetADSILogin() { try { string strServerName = ""; string strBaseDN = "" ; string strUserDN = ""; string strGroupName = ""; string strAccountFilter = ""; //Port no for LDAP Default is 389 string strPortNo = "389"; Boolean blnGroupUser=false; //Data source string string source = "Data Source=ATHAKUR;Initial Catalog=Times;user=sa;password=sa" ; //SQL statement that will be issued string select = "SELECT * from ADSI_PARAMETER"; //SQL Connection SqlConnection conn=new SqlConnection(source); // Open the database connection conn.Open () ; // Create the SQL command... SqlCommand cmd = new SqlCommand ( select , conn ) ; //Execute Data reader SqlDataReader myReader = cmd.ExecuteReader(); //Check if any rows return against user/pass if(myReader.HasRows) { while(myReader.Read()) { //Store the parameter's data in variables string strParameterName = myReader.GetSt
That's alot of work and a complete waste considering you didn't even the the OP's question...
A guide to posting questions on CodeProject[^]
Dave Kreskowiak Microsoft MVP Visual Developer - Visual Basic
2006, 2007, 2008