1.创建windows帐户
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
|
/// <summary>
/// 创建Windows帐户
/// </summary>
/// <param name="pathname"></param>
/// <returns></returns>
public
static
void
CreateLocalUser(
string
username,
string
password,
string
description)
{
DirectoryEntry localMachine =
new
DirectoryEntry(
"WinNT://"
+ Environment.MachineName +
",computer"
);
var
newUser = localMachine.Children.Add(username,
"user"
);
newUser.Invoke(
"SetPassword"
,
new
object
[] { password });
newUser.Invoke(
"Put"
,
new
object
[] {
"Description"
, description });
newUser.CommitChanges();
localMachine.Close();
newUser.Close();
}
|
2.更改Windows帐户密码
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
|
/// <summary>
/// 更改Windows帐户密码
/// </summary>
/// <param name="username"></param>
/// <param name="oldPwd"></param>
/// <param name="newPwd"></param>
public
static
void
ChangeWinUserPasswd(
string
username,
string
oldPwd,
string
newPwd)
{
DirectoryEntry localMachine =
new
DirectoryEntry(
"WinNT://"
+ Environment.MachineName +
",computer"
);
DirectoryEntry user = localMachine.Children.Find(username,
"user"
);
object
[] password =
new
object
[] { oldPwd, newPwd };
object
ret = user.Invoke(
"ChangePassword"
, password);
user.CommitChanges();
localMachine.Close();
user.Close();
}
|
3.判断Windows用户是否存在
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
|
/// <summary>
/// 判断Windows用户是否存在
/// </summary>
/// <param name="username"></param>
/// <returns></returns>
public
static
bool
ExistWinUser(
string
username)
{
try
{
using
(DirectoryEntry localMachine =
new
DirectoryEntry(
"WinNT://"
+ Environment.MachineName +
",computer"
))
{
var
user = localMachine.Children.Find(username,
"user"
);
return
user !=
null
;
}
}
catch
{
return
false
;
}
}
|
4.删除Windows用户
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
|
/// <summary>
/// 删除Windows用户
/// </summary>
/// <param name="username"></param>
/// <returns></returns>
public
static
bool
DeleteWinUser(
string
username)
{
try
{
using
(DirectoryEntry localMachine =
new
DirectoryEntry(
"WinNT://"
+ Environment.MachineName +
",computer"
))
{
//删除存在用户
var
delUser = localMachine.Children.Find(username,
"user"
);
if
(delUser !=
null
)
{
localMachine.Children.Remove(delUser);
}
}
return
true
;
}
catch
{
return
false
;
}
}
|
5.启用/禁用windows帐户
|
1
2
3
4
5
6
7
8
9
10
11
12
|
/// <summary>
/// 启用/禁用windows帐户
/// </summary>
/// <param name="username"></param>
public
static
void
Disable(
string
username,
bool
isDisable)
{
DirectoryEntry user =
new
DirectoryEntry(userDn);
user.InvokeSet(
"AccountDisabled"
, isDisable);
user.CommitChanges();
user.Close();
}
|
操作windows帐户的方法的诀窍在于通过DirectoryEntry 实例调用Invoke，InvokeGet,InvokeSet这三个方法。此三个方法可以对对本机 Active Directory 对象调用方法。操作win帐户的Active Directory 对象就是IADsUser接口。DirectoryEntry 实例通过调用Invoke方法调用IADsUser接口的方法，如上面修改Windows帐户密码就是通过调用IADsUser接口的“ChangePassword”方法；通过InvokeGet和InvokeSet方法调用IADsUser接口的属性，如上面的启用/禁用windows帐户，调用IADsUser接口的“AccountDisabled”属性。IADsUser接口具体有什么方法和属性可参考：http://msdn.microsoft.com/zh-cn/library/aa746340(v=VS.85).aspx