如何從Active Directory中獲得UserPrincipal對象的「Company」和「Department」？

Question

這可能嗎？代碼示例會很好。

Answer 1

其實，問題是如何得到兩個屬性的.NET 3.5 (System.DirectoryServices.AccountManagement.)UserPrincipal -object沒有給出userPrincipalName。

這裏如何做到這一點與extension method：

using System; 
using System.Collections.Generic; 
using System.Linq; 
using System.Text; 

using System.DirectoryServices; 
using System.DirectoryServices.AccountManagement; 

namespace MyExtensions 
{ 
    public static class AccountManagementExtensions 
    { 

     public static String GetProperty(this Principal principal, String property) 
     { 
      DirectoryEntry directoryEntry = principal.GetUnderlyingObject() as DirectoryEntry; 
      if (directoryEntry.Properties.Contains(property)) 
       return directoryEntry.Properties[property].Value.ToString(); 
      else 
       return String.Empty; 
     } 

     public static String GetCompany(this Principal principal) 
     { 
      return principal.GetProperty("company"); 
     } 

     public static String GetDepartment(this Principal principal) 
     { 
      return principal.GetProperty("department"); 
     } 

    } 
} 

上面的代碼將在大多數情況下（也就是將標準文字工作/字符串單值Active Directory屬性）。您需要修改代碼併爲您的環境添加更多錯誤處理代碼。

您可以使用它通過添加「擴展類」到您的項目，然後你可以這樣做：

PrincipalContext domain = new PrincipalContext(ContextType.Domain); 
UserPrincipal userPrincipal = UserPrincipal.FindByIdentity(domain, "youruser"); 
Console.WriteLine(userPrincipal.GetCompany()); 
Console.WriteLine(userPrincipal.GetDepartment()); 
Console.WriteLine(userPrincipal.GetProperty("userAccountControl")); 

（順便說一句，這本來是爲擴展特性有很大用途 - too bad it won't be in C# 4 either。）

Answer 2

像這樣的東西應該這樣做，如果部門和公司屬性爲用戶存在。

DirectoryEntry de = new DirectoryEntry(); 
de.Path = "LDAP://dnsNameOfYourDC.my.company.com"; 
DirectorySearcher deSearch = new DirectorySearcher(de); 
deSearch.PropertiesToLoad.Add("department"); 
deSearch.PropertiesToLoad.Add("company"); 

deSearch.SearchScope = SearchScope.Subtree; 
deSearch.Filter = "(&(objectClass=User)(userPrincipalName=MyPrincipalName))"; 
SearchResultCollection results = deSearch.FindAll(): 

foreach (SearchResult result in results) 
{ 
    ResultPropertyCollection props = result.Properties; 
    foreach (string propName in props.PropertyNames) 
    { 
     //Loop properties and pick out company,department 
     string tmp = (string)props[propName][0]; 
    } 
}