2011-02-18 30 views
2

下面的函數(應該是)列出本地機器上的所有組。
現在的問題是:爲什麼「每個人」組不顯示?
如果我以用戶身份更改目錄權限,則會看到「所有人」組,因此它必須在某處。爲什麼DirectoryEntry(「WinNT://」)不會顯示每個人?

Public Shared Function GetAllGroups() As DataTable 
     Return GetAllGroups(System.Environment.MachineName) 
    End Function 


    ' Tools.Permissions.Local.GetAllGroups() ' 
    Public Shared Function GetAllGroups(ByVal strDomain As String) As DataTable 
     Dim dt As New DataTable 
     Dim dr As DataRow = Nothing 

     Try 
      Dim bException As Boolean = False 
      Dim deLocalMachine As System.DirectoryServices.DirectoryEntry = New System.DirectoryServices.DirectoryEntry("WinNT://" + strDomain) 
      'Dim deRootObject As System.DirectoryServices.DirectoryEntry = GetDirectoryEntry(strPath, strUserName, strPassword, bException) ' 
      If bException Then 
       Return Nothing 
      End If 


      For Each child As System.DirectoryServices.DirectoryEntry In deLocalMachine.Children 
       Try 

        If StringComparer.OrdinalIgnoreCase.Equals(child.SchemaClassName, "group") Then 

         If Not dt.Columns.Contains("Members") Then 
          dt.Columns.Add("Members", GetType(System.String)) 
         End If 

         For Each strPropertyName As String In child.Properties.PropertyNames 
          If Not dt.Columns.Contains(strPropertyName) Then 
           dt.Columns.Add(strPropertyName, GetType(System.String)) 
          End If 
         Next strPropertyName 

         dr = dt.NewRow 

         Dim strMembers As String = "" 
         For Each member As Object In DirectCast(child.Invoke("Members"), IEnumerable) 
          Using memberEntry As New System.DirectoryServices.DirectoryEntry(member) 

           Try 
            strMembers += memberEntry.Properties("Name").Value.ToString() + Environment.NewLine 
            Console.WriteLine(memberEntry.Path) 
           Catch exFixMeIsNotNullNotWorking As Exception 

           End Try 

          End Using 
         Next 

         dr("Members") = strMembers 

         For Each strPropertyName As String In child.Properties.PropertyNames 

          If StringComparer.OrdinalIgnoreCase.Equals(strPropertyName, "objectSid") Then 
           Dim strSID As String = "" 
           Try 
            Dim sidThisSid As New System.Security.Principal.SecurityIdentifier(child.Properties(strPropertyName).Value, 0) 
            strSID = sidThisSid.ToString() 
            ' http://stackoverflow.com/questions/1040623/convert-a-username-to-a-sid-string-in-c-net ' 
            ' NTAccount ntAccount = (NTAccount)sid.Translate(typeof(NTAccount)); ' 
            ' Dim ntAccount As Security.Principal.NTAccount = CType(sidThisSid.Translate(GetType(Security.Principal.NTAccount)), Security.Principal.NTAccount) ' 
           Catch ex As Exception 

           End Try 

           dr(strPropertyName) = strSID 
          Else 
           dr(strPropertyName) = child.Properties(strPropertyName).Value.ToString() 
          End If 



         Next strPropertyName 
         dt.Rows.Add(dr) 

        End If 

       Catch ex As Exception ' Don't finish just because one fails 
        Console.WriteLine(ex.Message.ToString & vbLf & vbLf & ex.StackTrace.ToString, MsgBoxStyle.Critical, "FEHLER ...") 
       End Try 
      Next 
     Catch ex As Exception 
      Console.WriteLine(ex.Message.ToString & vbLf & vbLf & ex.StackTrace.ToString, MsgBoxStyle.Critical, "FEHLER ...") 
     End Try 

     Return dt 
    End Function ' ListEverything 
+0

感謝您分享您當前的解決方案 – Nasenbaer 2013-01-30 13:39:57

回答

2

Everyone組不是標準組,而是隱式的基團或內置主體。如果你打開你的本地「用戶和組」,你也不會在那裏看到它。其他「組」也是如此,例如Authenticated Users。如果你想要訪問這些,你需要使用枚舉的System.Security.Principal.WellKnownSidType。這個Windows 2008 article對於老版本的Windows也是非常重要的。

+0

但管理員組也是如此,並且顯示出來。 – 2011-02-18 16:24:28