C#修改AD賬號及密碼

在使用AD域環境搭建的賬號系統修改密碼的時候比較麻煩一般需要管理員在域環境去進行對用戶的密碼進行修改。

以下就是用來查詢和修改AD域密碼的方法。

        /// <summary>
        /// AD賬戶查詢
        /// </summary>
        /// <param name="Domain"></param>
        /// <param name="UserAccount"></param>
        /// <param name="UserPassWord"></param>
        /// <returns></returns>
        private static string CheckAccount(string Domain, string UserAccount, string UserPassWord)
        {
            string ReturnValue = string.Empty;
            try
            {
                //throw new InvalidPluginExecutionException(Domain + "|==|" + UserAccount + "|==|" + UserPassWord);
                DirectoryEntry entry = new DirectoryEntry("LDAP://" + Domain, UserAccount, UserPassWord, AuthenticationTypes.Secure);
                DirectorySearcher mySearcher = new DirectorySearcher(entry);
                mySearcher.Filter = ("(&(objectClass=user)(sAMAccountName=" + UserAccount + "))");
                SearchResult searchResult = mySearcher.FindOne();
                if (searchResult != null)
                {
                    ReturnValue = "1";
                }
            }
            catch (Exception ex)
            {
                ReturnValue = "賬號有誤：" + ex.Message;
            }
            return ReturnValue;
        }

/// <summary>
        /// 修改AD域密碼
        /// </summary>
        /// <param name="Domain">域</param>
        /// <param name="AdministratorAccount">管理員賬號</param>
        /// <param name="UserAccount">待修改密碼賬戶</param>
        /// <param name="AdministratorPassWord">管理員賬戶密碼</param>
        /// <param name="UserNewPassWord">新用戶新密碼</param>
        /// <param name="User_ConfirmPassword">新用戶新密碼確認</param>
        /// <returns></returns>
        private static string UpdateADAccount(string Domain, string AdministratorAccount, string UserAccount, string AdministratorPassWord, string UserNewPassWord, string User_ConfirmPassword)
        {
            //反饋內容、
            string ReturnString = string.Empty;
            if (UserNewPassWord == User_ConfirmPassword)
            {
                try
                {
                    DirectoryEntry entry = new DirectoryEntry("LDAP://" + Domain, AdministratorAccount, AdministratorPassWord, AuthenticationTypes.Secure);
                    DirectorySearcher mySearcher = new DirectorySearcher(entry);
                    mySearcher.Filter = ("(&(objectClass=user)(sAMAccountName=" + UserAccount + "))");
                    SearchResult searchResult = mySearcher.FindOne();
                    DirectoryEntry userEntry = searchResult.GetDirectoryEntry();
                    userEntry.Invoke("SetPassword", new object[] { UserNewPassWord });
                    ReturnString = "修改密碼成功！！";
                }
                catch (Exception ex)
                {
                    ReturnString = "修改密碼出錯！！問題可能是：" + ex.Message;
                }
            }
            else
            {
                ReturnString = "兩次密碼輸入不一致";
            }

            return ReturnString;
        }