Click here to Skip to main content
13,355,311 members (59,307 online)
Click here to Skip to main content
Add your own
alternative version


108 bookmarked
Posted 25 Apr 2005

Active Directory Object Navigator

, 25 Apr 2005
Rate this:
Please Sign up or sign in to vote.
An article describing how to connect to an Active Directory database.

Application Image


First of all, I want to introduce you to the problem that led me to this solution. I needed to authenticate against the Active Directory (AD) database, but found no object oriented way to do so. I found myself in a dead-end. How to use the Active Directory tree of objects in a way that didn't go against our 3-tier object oriented architecture.

So I decided I had to abstract the whole AD layer usage of my application. And to do so, I needed a framework that would allow me to navigate through AD objects as if they were an XML file (rough comparison I know!!!).


I found out so many articles on how to get this property on AD, or how to get that property, but none really teaching how to use the LDAP language for instance. So I had a tough time trying to figure out how to reach an object via LDAP query.

Let me say that I do not intend to build an AD manager, and in my AD Object Navigator, I don't even allow you to change properties (although you could with the OriginalDirectoryEntry property).

My intention is to give you (the reader) a basic knowledge of how to use the AD database and a built framework for getting users, groups, containers and organizational units if you, like me, are planning on authenticating against an Active Directory database (and planning on using the AD user as the user for your application).

Using the code

I included with the source code (inside the Doc\ directory) a Windows HTML Help that explains on detail every class and function in the framework.

I commented the properties in the LoadUser function so it would load faster, but if you need more info about your users, just uncomment it or add other properties to it. Please let me know if it helped you and what you added.

The LoadUser method:

u = new Objects.User();
u.Id = de.NativeGuid;
u.UserName = getStringProperty(de.Properties,"sAMAccountName");
u.Email = getStringProperty(de.Properties,"userPrincipalName");
//u.GivenName = getStringProperty(de.Properties,"givenName");
u.OriginalDirectoryEntry = de;
if (de.Properties["useraccountcontrol"].Value != null)
    if (((int)de.Properties["useraccountcontrol"].Value & 2) == 0)
        u.Enabled = true;
        u.Enabled = false;
    u.Enabled = false;
//u.AdditionalPhoneNumbers = 
//             getStringArrayProperty(de.Properties,"otherTelephone");
//u.AdditionalHomePages = getStringArrayProperty(de.Properties,"url");
//u.City = getStringProperty(de.Properties,"l");
//u.Country = getStringProperty(de.Properties,"c");
//u.Description = getStringProperty(de.Properties,"description");
u.DisplayName = getStringProperty(de.Properties,"displayName");
//u.HomePage = getStringProperty(de.Properties,"wWWHomePage");
//u.Initials = getStringProperty(de.Properties,"initials");
//u.PhysicalDeliveryOfficeName = 
//     getStringProperty(de.Properties,"physicalDeliveryOfficeName");
//u.PostOfficeBox = getStringProperty(de.Properties,"postOfficeBox");
//u.State = getStringProperty(de.Properties,"st");
//u.StreetAddress = getStringProperty(de.Properties,"streetAddress");
//u.TelephoneNumber = getStringProperty(de.Properties,"telephoneNumber");

The other thing you should know is that (for ease of use) I added three constants to the framework: DEFAULTDOMAIN, DEFAULTUSERNAME, DEFAULTPASSWORD. These constants are to be used with the framework functions so you won't have to pass them as parameters. Although they are used as the impersonate data, they could be set to nothing (I wouldn't recommend it though!). These constants are in the ADManager class.

#region Constants
    const string DEFAULTDOMAIN = "yourDomain";
    const string DEFAULTUSERNAME = "yourUserName";
    const string DEFAULTPASSWORD = "yourPassword";

I'll explain the most common situations where you would like to be using this framework:

Authenticating an user against Active Directory:

Public Function ValidateUser(ByVal username as _
          string, ByVal password as string) as boolean
  Dim u as BVA.ActiveDirectory.Navigator.Objects.User = _
  return (u is nothing)
End Function
public bool ValidateUser(string username, string password)
  BVA.ActiveDirectory.Navigator.Objects.User u = 
  return (u==null);

Getting the groups that an user is a member of:

Public Function MemberShips(ByVal username as string, _
      ByVal password as string) as _
  Dim u as BVA.ActiveDirectory.Navigator.Objects.User = _
  return u.MemberOf
End Function
public BVA.ActiveDirectory.Navigator.Objects.GroupCollection 
                MemberShips(string username, string password)
  BVA.ActiveDirectory.Navigator.Objects.User u =
  return (u.MemberOf);

Getting the users in a determined group:

(SID is a unique ID that every AD object has in the AD database.)

Public Function Members(ByVal SID as String) as _
  Dim g as BVA.ActiveDirectory.Navigator.Objects.Group = _
  return g.Members
End Function
public BVA.ActiveDirectory.Navigator.Objects.GroupCollection 
                                          Members(string SID)
  BVA.ActiveDirectory.Navigator.Objects.Group g = 
  return (g.Members);

And there are many more applications for this framework like getting all users in the domain, checking to see if a user account is enabled, retrieving all the users in a determined organizational unit, and many more. Explore the code.

I have provided a demo application that shows the entire Active Directory tree.

Points of Interest

One thing that is really great about this framework is that it is completely loaded on-demand.

This means that all collections are loaded only when you need them. This is great because the Active Directory database isn't really fast, so you really wouldn't want to load the entire tree every time you want to access a user, for instance.

I.e.: let's say you have an Organizational Unit Users and then inside it you have an Organizational Unit Support and inside Support you have user TestUser. When you get the root node, it doesn't load the Users Organizational Unit. It only loads it when you access root.OrganizationalUnits. Then it loads all child nodes for the root node (including our Users node). Then when you access UsersNode.OrganizationalUnits, it loads all child nodes for the Users Organizational Unit node (including our Support node). And so on.

Another thing that would really add to this framework (and I didn't have the time to implement it, even though I would like to do it a lot) is adding caching to it, so when you get one node you already got before, it would use the cached version.


V 1.0 - AD Object Navigator released.


Caching the objects in the framework.


This article has no explicit license attached to it but may contain usage terms in the article text or the download files themselves. If in doubt please contact the author via the discussion board below.

A list of licenses authors might use can be found here


About the Author

Web Developer
United Kingdom United Kingdom
Bernardo Heynemann is a senior developer at ThoughtWorks UK in London. He is really into Visual Studio 2008, LINQ and ASP.Net MVC. He's also chairman of Stormwind Project ( He can be found at his blog at

You may also be interested in...

Comments and Discussions

GeneralGreat work ! Pin
Adnan S Hussain19-Oct-08 0:11
memberAdnan S Hussain19-Oct-08 0:11 
GeneralProblem converting project for VS 2005/2008 Pin
tsudonymn9-Oct-08 11:53
membertsudonymn9-Oct-08 11:53 
GeneralRe: Problem converting project for VS 2005/2008 Pin
Member 244544913-Jan-09 19:56
memberMember 244544913-Jan-09 19:56 
QuestionHow to assign a user into OU Pin
Hakmeh Mohannad18-Apr-08 23:28
memberHakmeh Mohannad18-Apr-08 23:28 
GeneralGUID vs SID Pin
mkeysaer11-Jan-07 7:30
membermkeysaer11-Jan-07 7:30 
QuestionHow to read Contacts from an OU? Pin
Paulo Vaz2-Jan-07 1:18
memberPaulo Vaz2-Jan-07 1:18 
AnswerRe: How to read Contacts from an OU? Pin
bernardoh2-Jan-07 1:45
memberbernardoh2-Jan-07 1:45 
AnswerRe: How to read Contacts from an OU? [modified] Pin
mkeysaer12-Jan-07 10:47
membermkeysaer12-Jan-07 10:47 
GeneralRe: How to read Contacts from an OU? Pin
Paulo Vaz13-Jan-07 7:39
memberPaulo Vaz13-Jan-07 7:39 
GeneralGetGroup is not there Pin
Jos Branders30-Dec-06 8:40
memberJos Branders30-Dec-06 8:40 
GeneralRe: GetGroup is not there Pin
bernardoh2-Jan-07 1:43
memberbernardoh2-Jan-07 1:43 
GeneralThanks Pin
banka_ravi6-Dec-06 1:30
memberbanka_ravi6-Dec-06 1:30 
GeneralActive directory on web Pin
Mirko2C29-Nov-06 7:44
memberMirko2C29-Nov-06 7:44 
GeneralRe: Active directory on web Pin
bernardoh29-Nov-06 7:54
memberbernardoh29-Nov-06 7:54 
GeneralRe: Active directory on web Pin
thietnt29-May-08 17:12
memberthietnt29-May-08 17:12 
GeneralServer is not Operational Pin
shubie3-Sep-06 16:32
membershubie3-Sep-06 16:32 
GeneralRe: Server is not Operational Pin
njdnjdnjdnjdnjd24-Oct-06 9:54
membernjdnjdnjdnjdnjd24-Oct-06 9:54 
GeneralRe: Server is not Operational Pin
Jocaover3-Jul-08 23:02
memberJocaover3-Jul-08 23:02 
QuestionGetUser without their password Pin
dwclarkNU26-Jun-06 8:43
memberdwclarkNU26-Jun-06 8:43 
AnswerRe: GetUser without their password Pin
DungVinh15-Aug-06 22:54
memberDungVinh15-Aug-06 22:54 
Questionhow to retrieve user groups Pin
KrispyKreme22-Jun-06 11:18
memberKrispyKreme22-Jun-06 11:18 
AnswerRe: how to retrieve user groups Pin
bernardoh22-Jun-06 19:32
memberbernardoh22-Jun-06 19:32 
GeneralRe: how to retrieve user groups Pin
bernardoh22-Jun-06 19:35
memberbernardoh22-Jun-06 19:35 
Generalcode reusage Pin
KrispyKreme22-Jun-06 10:32
memberKrispyKreme22-Jun-06 10:32 
GeneralRe: code reusage Pin
bernardoh22-Jun-06 19:29
memberbernardoh22-Jun-06 19:29 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.

Permalink | Advertise | Privacy | Terms of Use | Mobile
Web01 | 2.8.180111.1 | Last Updated 26 Apr 2005
Article Copyright 2005 by bernardoh
Everything else Copyright © CodeProject, 1999-2018
Layout: fixed | fluid