Lonissa in the first post had a requirement for not displaying the Student’s number (which was their logon ID [SAMaccountName]). The following code modified from version 8.04 should utilise the “FullName” attribute from the WinNT provider. It works on my test network, which isn’t particularly hardened. Watch out for line wrap!

I’ve also got some idea’s on utilising Active Directory to populate other information such as email address and then running a script to ensure that information in the two databases are synchronised (i.e. people deleted from AD can be disabled/removed from the Forum and will sync name changes/email addresses, etc.) – this would require an account on AD as IIS6 (Win2003) is more secure than 5.1 (win2000).

Issue: When Active Directory integration is enabled, the user’s SAMaccountName is displayed– this makes it difficult to identify the user.

Solution: This can be changed by modifying the code in “functions_windows_authentication.asp” starting at line 137 from:

'Use the last part of the windows authentication (bit without domain) as the forum username

If InStrRev(strAuthenticatedUser, "\") = 0 Then

          strUserName = strAuthenticatedUser

Else

          strUserName = Mid(strAuthenticatedUser, InStrRev(strAuthenticatedUser, "\")+1, Len(strAuthenticatedUser))

End If

To:

'* This change utilises the WINNT provider to obtain the user's "FullName" rather than SAMaccountName

'* NOTE: Variable declarations are within the modified to contain all changes

'Set error trapping

On Error Resume Next

'Declare the object to hold user information

Dim objUser

'Bind to the object - we need to swap \ with / for binding

Set objUser = GetObject("WinNT://" & replace(strAuthenticatedUser,"\","/"))

'If an error has occured while binding, use SAMaccountName

If Err.Number <> 0 Then

          'Use the last part of the windows authentication (bit without domain) as the forum username

          If InStrRev(strAuthenticatedUser, "\") = 0 Then

                   strUserName = strAuthenticatedUser

          Else

                   strUserName = Mid(strAuthenticatedUser, InStrRev(strAuthenticatedUser, "\")+1, Len(strAuthenticatedUser))

https://forums.webwiz.net/playing-with-nt-authentication-and-ad_topic20557_post114267.html#114267 https://forums.webwiz.net/playing-with-nt-authentication-and-ad_topic20557_post110603.html#110603 Author: dpyers
Subject: 20557
Posted: 11 July 2006 at 6:07pm

looks like the code got trimmed.
this should have been on the bottom og f it


Select Case VarType(CurrentUser.MemberOf)
    Case 8
  strGroups = LCase(CurrentUser.MemberOf)
    Case 8204
        strGroups = LCase(Join(CurrentUser.MemberOf))
End Select

Response.Write strGroups

]]> Tue, 11 Jul 2006 18:07:20 +0000 https://forums.webwiz.net/playing-with-nt-authentication-and-ad_topic20557_post110603.html#110603 https://forums.webwiz.net/playing-with-nt-authentication-and-ad_topic20557_post110586.html#110586 Author: Lonissa
Subject: 20557
Posted: 11 July 2006 at 2:05pm

I hate to tell you this, but the Windows Scripting Host network object has nothing to do with active directory.  In fact, we used this in our logon scripts back in an NT 4 environment.

Your code is simply reading the username and computer name from the network object, you can't use that to find out what AD group someone belongs to.

Here is the code I'm using to connect to AD:

Set strConn = Server.CreateObject("ADODB.Connection") strConn.provider ="ADsDSOObject" strConn.Properties("User ID") = "username" strConn.Properties("Password") = "password" strConn.open "Active Directory Provider" strSQL = "SELECT displayname, mail, telephonenumber, title, department FROM 'GC://OU=Staff,OU=People,DC=domain,DC=com' WHERE name ='" & strAuthenticatedUser & "'"

]]> Tue, 11 Jul 2006 14:05:16 +0000 https://forums.webwiz.net/playing-with-nt-authentication-and-ad_topic20557_post110586.html#110586 https://forums.webwiz.net/playing-with-nt-authentication-and-ad_topic20557_post110552.html#110552 Author: dpyers
Subject: 20557
Posted: 11 July 2006 at 3:41am

I ran across this code today for determining what AD groups someone belongs to

Dim COURTHOUSE, WshNetwork, existingDrives, ADSysInfo, CurrentUser, UserName, ComputerName Dim strGroups, oGroup,x Set WshNetwork = CreateObject("WScript.Network") Set existingDrives = WshNetwork.EnumNetworkDrives Set ADSysInfo = CreateObject("ADSystemInfo") Response.Write ADSysInfo.UserName & "<BR><BR>" Set CurrentUser = GetObject("LDAP://" & ADSysInfo.UserName)    UserName = LCase(wshNetwork.UserName) ComputerName = LCase(WshNetwork.ComputerName) Response.Write UserName & " " & ComputerName

Edited by dpyers - 11 July 2006 at 3:42am]]> Tue, 11 Jul 2006 03:41:20 +0000 https://forums.webwiz.net/playing-with-nt-authentication-and-ad_topic20557_post110552.html#110552 https://forums.webwiz.net/playing-with-nt-authentication-and-ad_topic20557_post110255.html#110255 Author: Lonissa
Subject: 20557
Posted: 06 July 2006 at 3:45pm

Hmm, I don't want all my users to be moderators.  I've made some users administrators and moderators by changing the group_id field in tblAuthor.

The problem is, only the default Admin account can get to the admin control panel (but not change member profile settings) and only the users I've set to admins/moderators are able to change member profiles (but not access the admin control panel).

I think what I'll have to do is bypass the admin login for the control panel, and have it simply check if the group_id is 1 to allow them in...
]]> Thu, 06 Jul 2006 15:45:36 +0000 https://forums.webwiz.net/playing-with-nt-authentication-and-ad_topic20557_post110255.html#110255 https://forums.webwiz.net/playing-with-nt-authentication-and-ad_topic20557_post110251.html#110251 Author: kastigeer
Subject: 20557
Posted: 06 July 2006 at 2:56pm

Lonissa, I'm having the same issue as you and am also keen to get this working - I've managed to get AD users in the moderators group (by making this the default selected group) and this should do most of what we want...