Active Directory UDF - Help & Support (II)

[jp10558]

I'm trying to use the _AD_CreateUser, _AD_SetPassword and _AD_ModifyAttribute functions from a non-admin account on an OU where in AD I have delegated permissions. This doesn't seem to work? Is there a way to do this?

[water]

What are the values of @error and @extended after _AD_CreateUser?

[jp10558]

lol. Seemed it was UAC related then. Darn. Sorry for the question.

[water]

No problem. Glad you could solve it yourself.

[Iceman682]

Hi Water,

Is there a way to check if a user is a member of a security group.

I know that IsMember does it when you are an immediate member of say group1, but what if a user is a member of group2, and group2 is a member of group1 etc?

Regards

Iceman

[water]

So you want a recursive IsMember function?

[Iceman682]

I guess so ???

[water]

Then try this recursive version of _AD_IsMemberOf (will be part of the next release of the UDF).

_AD_IsMemberOf.au3

[Iceman682]

Thanks, I will take a look and report back accordingly.

[water]

Hi Water, nice to talk with you again, I got a question for you, is it possible to get the remote logged on user with your AD script?, or can I write some field on the computer object with the logged on user?

Thanks in advance and regards.

[water]

What do you mean by remote logged on user? Terminal server?

[jcpetu]

I meant the user who is currently logged on in a remote workstation.

[water]

Active Directory doesn't hold the information which user is logged on on which computer.

There has been a similar discussion some months ago. I suggested to modify the logon script and store the userid/computer on a network share.

[jcpetu]

OK, thanks a lot Water and regards.

[KLM]

Danke

[water]

[kor]

Can you please post the statement that returns this errors?

No, because I have 100 different calls to AD and I don't know which one is returning this error. It would help if your debug information included the script line number from the actual script it is running from .. that would help me know which call to AD is returning the error.

[water]

Scriptline = 914

The COM error handler displays the line number as in the above example.

[kor]

The COM error handler displays the line number as in the above example.

My script only has 300 lines of code. Having a 914 script line is impossible. Unless it's referring to *your* script line number which would be AD.au3 which doesn't do me much good.

[BrewManNH]

I'd start adding some debugging consolewrites to your script to see where it gets to when that error occurs.