如何以編程方式更改Active Directory密碼

Question

我有一組測試帳戶即將創建，但帳戶將設置爲在第一次登錄時要求更改密碼。我想用C＃編寫一個程序來檢查測試帳戶並更改密碼。

Answer 1

可以使用UserPrincipal類的SetPassword方法，只要你有足夠的權限，一旦你找到正確的UserPrincipal對象。使用FindByIdentity來查找所討論的主要對象。

using (var context = new PrincipalContext(ContextType.Domain)) 
{ 
    using (var user = UserPrincipal.FindByIdentity(context, IdentityType.SamAccountName, userName)) 
    { 
     user.SetPassword("newpassword"); 
     // or 
     user.ChangePassword("oldPassword", "newpassword"); 
    } 
} 

Answer 2

這裏有一個很好的Active Directory編程快速參考：

Howto: (Almost) Everything In Active Directory via C#

見接近尾聲密碼重設。

public void ResetPassword(string userDn, string password) 
{ 
    DirectoryEntry uEntry = new DirectoryEntry(userDn); 
    uEntry.Invoke("SetPassword", new object[] { password }); 
    uEntry.Properties["LockOutTime"].Value = 0; //unlock account 

    uEntry.Close(); 
} 

Answer 3

這裏是解決方案：

string newPassword = Membership.GeneratePassword(12, 4);  
string quotePwd = String.Format(@"""{0}""", newPassword);  
byte[] pwdBin = System.Text.Encoding.Unicode.GetBytes(quotePwd);  
UserEntry.Properties["unicodePwd"].Value = pwdBin;  
UserEntry.CommitChanges(); 

Answer 4

試試這個代碼。它適用於我，

public void ChangeMyPassword(string domainName, string userName, string currentPassword, string newPassword) 
{ 
    try 
    { 
     string ldapPath = "LDAP://192.168.1.xx"; 
     DirectoryEntry directionEntry = new DirectoryEntry(ldapPath, domainName + "\\" + userName, currentPassword); 
     if (directionEntry != null) 

     { 
      DirectorySearcher search = new DirectorySearcher(directionEntry); 
      search.Filter = "(SAMAccountName=" + userName + ")"; 
      SearchResult result = search.FindOne(); 
      if (result != null) 
      { 
       DirectoryEntry userEntry = result.GetDirectoryEntry(); 
       if (userEntry != null) 
       { 
        userEntry.Invoke("ChangePassword", new object[] { currentPassword, newPassword }); 
        userEntry.CommitChanges(); 
       } 
      } 
     } 
    } 
    catch (Exception ex) 
    { 
     throw ex; 
    } 
} 

Answer 5

可以使用.NET Framework 2.0爲域帳戶設置新密碼。 見波紋管工作代碼：

string domainfqdn="mydomain.test.gov" //fqdn of the domain 
string ldapPath =GetObjectDistinguishedName (objectClass.user,returnType.distinguishedName, args[0].ToString(),domainfqdn); 
ldapPath="LDAP://" + domainfqdn + :389/"+ldapPath; 

DirectoryEntry uEntry = new DirectoryEntry(ldapPath,null,null,AuthenticationTypes.Secure); 
uEntry.CommitChanges(); 
Console.WriteLine(ldapPath); 
string password="myS3cr3tPass"    
uEntry.Invoke("SetPassword", new object[] { password }); 
uEntry.Properties["LockOutTime"].Value = 0; //unlock account     
uEntry.CommitChanges(); 
uEntry.Close();    

是非常importan檢查在uEntry參數，代碼將當前線程的安全上下文中運行，除非空值被指定

Answer 6

public void ResetPassword(string userName, string Password, string newPassword) 
{ 
    try 
    { 
     DirectoryEntry directoryEntry = new DirectoryEntry(Path, userName, Password); 

     if (directoryEntry != null) 
     { 
      DirectorySearcher searchEntry = new DirectorySearcher(directoryEntry); 
      searchEntry.Filter = "(samaccountname=" + userName + ")"; 
      SearchResult result = searchEntry.FindOne(); 
      if (result != null) 
      { 
       DirectoryEntry userEntry = result.GetDirectoryEntry(); 
       if (userEntry != null) 
       { 
        userEntry.Invoke("SetPassword", new object[] { newPassword }); 
        userEntry.Properties["lockouttime"].Value = 0; 
       } 
      } 
     } 
    } 
    catch (Exception ex) 
    { 
     Log.Error("Password Can't Change:" + ex.InnerException.Message); 
    } 
}