C#写的对系统用户和组操作的类(可以实现用户和组的添加、删除、修改)
using System;
using System.Collections.Generic;
using System.Text;
using System.DirectoryServices;
namespace SystemUserOperationDll
{
public class SystemUserOperationClass
{
private DirectoryEntry AD;
/// <summary>
/// 初始化方法
/// </summary>
/// <param name="strMachineName">机器名</param>
/// <param name="strLoginName">登录用户名(如：Administrator)</param>
/// <param name="strLoginPassword">登录密码</param>
public SystemUserOperationClass(string strMachineName, string strLoginName, string strLoginPassword)
{
AD = new DirectoryEntry("WinNT://" + strMachineName + ",computer", ".\\" + strLoginName, strLoginPassword);
}
/// <summary>
/// 添加系统(域)用户
/// </summary>
/// <param name="strUserName">用户名</param>
/// <param name="strPassword">密码</param>
/// <param name="strDescription">描述</param>
/// <returns></returns>
public bool AddDomainUser(string strUserName, string strPassword, string strDescription)
{
try
{
DirectoryEntry NewUser;
NewUser = AD.Children.Add(strUserName, "user"); //添加用户
NewUser.Invoke("SetPassword", new Object[] { strPassword }); //设置密码
NewUser.Properties["description"].Add(strDescription); //添加描述
NewUser.CommitChanges();
AD.Close();
}
catch
{
throw;
}
return true;
}
/// <summary>
/// 修改系统(域)用户
/// </summary>
/// <param name="strUserName">用户名</param>
/// <param name="strPassword">密码</param>
/// <param name="strDescription">描述</param>
/// <returns></returns>
public bool ModifyDomainUser(string strUserName, string strPassword, string strDescription)
{
try
{
DirectoryEntry User = AD.Children.Find(strUserName);
if (User.Name != null)
{
//修改密码
User.Invoke("SetPassword", new Object[] { strPassword });
//修改描述
User.Properties["description"].Value = strDescription;
User.CommitChanges();
}
AD.Close();
}
catch
{
throw;
}
return true;
}
/// <summary>
/// 删除系统(域)用户
/// </summary>
/// <param name="strUserName">用户名</param>
/// <returns></returns>
public bool DeleteDomainUser(string strUserName)
{
try
{
DirectoryEntry User = AD.Children.Find(strUserName, "user");//找到要删除的用户
if (User.Name != null)
{
AD.Children.Remove(User);
}
AD.Close();
}
catch
{
throw;
}
return true;
}
/// <summary>
/// 添加系统(域)组
/// </summary>
/// <param name="strGroupName">组名</param>
/// <param name="strDescription">描述</param>
/// <returns></returns>
public bool AddDomainGroup(string strGroupName, string strDescription)
{
try
{
DirectoryEntry Group;
Group = AD.Children.Add(strGroupName, "group");
Group.Properties["description"].Add(strDescription);
Group.CommitChanges();
AD.Close();
}
catch
{
throw;
}
return true;
}
/// <summary>
/// 修改系统(域)组
/// </summary>
/// <param name="strGroupName">组名</param>
/// <param name="strDescription">描述</param>
/// <returns></returns>
public bool ModifyDomainGroup(string strGroupName, string strDescription)
{
try
{
DirectoryEntry Group = AD.Children.Find(strGroupName);
if (Group.Name != null)
{
Group.Properties["description"].Value = strDescription;
Group.CommitChanges();
}
AD.Close();
}
catch
{
throw;
}
return true;
}
/// <summary>
/// 删除系统(域)组
/// </summary>
/// <param name="strGroupName">组名</param>
/// <returns></returns>
public bool DeleteDomainGroup(string strGroupName)
{
try
{
DirectoryEntry Group = AD.Children.Find(strGroupName, "group");
if (Group.Name != null)
{
AD.Children.Remove(Group);
}
AD.Close();
}
catch
{
throw;
}
return true;
}
/// <summary>
/// 添加组用户
/// </summary>
/// <param name="strGroupName">组名</param>
/// <param name="strUserName">用户名</param>
/// <returns></returns>
public bool AddGroupUser(string strGroupName,string strUserName)
{
try
{
DirectoryEntry Group = AD.Children.Find(strGroupName, "group");// 找到组
DirectoryEntry User = AD.Children.Find(strUserName, "user");//找到用户
if (Group.Name != null && User.Name != null)
{
Group.Invoke("Add", new Object[] { User.Path });
}
AD.Close();
}
catch
{
throw;
}
return true;
}
/// <summary>
/// 移除组用户
/// </summary>
/// <param name="strGroupName">组名</param>
/// <param name="strUserName">用户名</param>
/// <returns></returns>
public bool RemoveGroupUser(string strGroupName,string strUserName)
{
try
{
DirectoryEntry Group = AD.Children.Find(strGroupName, "group");// 找到组
object members = Group.Invoke("Members", null);
foreach (object member in (System.Collections.IEnumerable)members)
{
//获取该组的每个成员
DirectoryEntry x = new DirectoryEntry(member);
if (strUserName == x.Name) //要移除的用户存在的话，则从该组中移除。
{
DirectoryEntry User = AD.Children.Find(strUserName, "user");//找到该用户
Group.Invoke("Remove", new Object[] { User.Path });
}
}
AD.Close();
}
catch
{
throw;
}
return true;
}
}
}
第一次做这方面的东西，有不足之处还请不吝指教。
