Question

I’m developing an intranet application. The application is working on an IIS on a windows server 2008. I’m using C# for coding the ASP.NET.

So, I only want to allow the domain users who are member of the OU ICT.
I don’t want a login form, just an automatic authentication.

Sql Server Reporting Services works like this. Users don’t have to login and the security is based on the AD. -> exactly what I’m looking for.

I have tried several ways, like with WidowsImpersonationContext I hit a dead-end on the OU.

If there would be anyone who can help me, I would be very thankful.

Solved the part where I check if the user is in the group/ou.

But I can’t get the windows user from the client machine without logging in.

Greetings, Jeff

Answer 1

I´m not to sure about the mixture between OU´s and Groups here, but maybe the following will help you:

Reference System.DirectoryServices.AccountManagement,

        var pc = new PrincipalContext(ContextType.Domain); 

        var user = UserPrincipal.FindByIdentity(pc, IdentityType.SamAccountName,"DOMAIN\\USER");

        var g = System.DirectoryServices.AccountManagement.GroupPrincipal.FindByIdentity(pc, IdentityType.DistinguishedName, "Everyone");

        var check = user.IsMemberOf(g);

HTH
Dominik