I would like user(s) to be able to modify certain pre-defined fields through
a webpage (ASP using vbscript on IIS6) and I would like to know what is the
recommended best-practice?

I can only think of two ways to do this:
1. The script runs under an account that has permissions to modify the AD
fields. If a user has the rights to run the script, they can make the
changes.
2. The script impersonates the authenticated user. The user can only
accomplish the tasks if their user account has rights in AD.

Any help or guidance would be appreciated.

An answer with examples would be even better!

Many thanks,

Luke

Re: Recommended way of scripting Active Directory procedures through a webpage? by Roland

Roland
Tue May 03 14:57:27 CDT 2005

"lamaslany" <luke.maslany@cad.coventry.ac.uk> wrote in message
news:uzlP8e$TFHA.752@TK2MSFTNGP10.phx.gbl...
:I would like user(s) to be able to modify certain pre-defined fields
through
: a webpage (ASP using vbscript on IIS6) and I would like to know what is
the
: recommended best-practice?
:
: I can only think of two ways to do this:
: 1. The script runs under an account that has permissions to modify the AD
: fields. If a user has the rights to run the script, they can make the
: changes.
: 2. The script impersonates the authenticated user. The user can only
: accomplish the tasks if their user account has rights in AD.
:
: Any help or guidance would be appreciated.
:
: An answer with examples would be even better!
:
: Many thanks,

Have you been here yet?
http://www.microsoft.com/technet/scriptcenter/createit.mspx

Focus on ADSI Scriptomatic.

One 'thanks' is appreciated. 'Many' is not required. A thanks with a
monetary gift would be even better! (O:=

--
Roland Hall
/* This information is distributed in the hope that it will be useful, but
without any warranty; without even the implied warranty of merchantability
or fitness for a particular purpose. */
Technet Script Center - http://www.microsoft.com/technet/scriptcenter/
WSH 5.6 Documentation - http://msdn.microsoft.com/downloads/list/webdev.asp
MSDN Library - http://msdn.microsoft.com/library/default.asp



Re: Recommended way of scripting Active Directory procedures through a webpage? by lamaslany

lamaslany
Thu May 05 02:58:24 CDT 2005

Roland,

Thanks (again!) for the link; I have indeed seen this previously and I have
working vbscripts to perform the actions I want to perform.

My problem/query is how to run such scripts remotely through an ASP page -
in particular the user context to run such scripts.

Luke


"Roland Hall" <nobody@nowhere> wrote in message
news:%23KbnVpBUFHA.928@TK2MSFTNGP15.phx.gbl...
> "lamaslany" <luke.maslany@cad.coventry.ac.uk> wrote in message
> news:uzlP8e$TFHA.752@TK2MSFTNGP10.phx.gbl...
> :I would like user(s) to be able to modify certain pre-defined fields
> through
> : a webpage (ASP using vbscript on IIS6) and I would like to know what is
> the
> : recommended best-practice?
> :
> : I can only think of two ways to do this:
> : 1. The script runs under an account that has permissions to modify the
> AD
> : fields. If a user has the rights to run the script, they can make the
> : changes.
> : 2. The script impersonates the authenticated user. The user can only
> : accomplish the tasks if their user account has rights in AD.
> :
> : Any help or guidance would be appreciated.
> :
> : An answer with examples would be even better!
> :
> : Many thanks,
>
> Have you been here yet?
> http://www.microsoft.com/technet/scriptcenter/createit.mspx
>
> Focus on ADSI Scriptomatic.
>
> One 'thanks' is appreciated. 'Many' is not required. A thanks with a
> monetary gift would be even better! (O:=
>
> --
> Roland Hall
> /* This information is distributed in the hope that it will be useful, but
> without any warranty; without even the implied warranty of merchantability
> or fitness for a particular purpose. */
> Technet Script Center - http://www.microsoft.com/technet/scriptcenter/
> WSH 5.6 Documentation -
> http://msdn.microsoft.com/downloads/list/webdev.asp
> MSDN Library - http://msdn.microsoft.com/library/default.asp
>
>