modify AD property and password using C#

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;

using System.DirectoryServices;

namespace ConsoleApplication1
{

    public class Helper
    {
        public static string path = "LDAP://192.168.8.1";   //the IP address point to your domain server 
        public static string admin = "administrator";       //administrator name
        public static string pwd = "Abcdefg";               //the password for the previous user

        //create a random password,it at least has 3 characters
        //the first character is a upper letter
        //the second character is a special letter,such as !,@,# ...
        //the reset of the characters are lower letters
        public static string GetRandomPassword(int passwordLen)
        {
            System.Threading.Thread.Sleep(15);
            string randomChars1 = "abcdefghijklmnopqrstuvwxyz";
            string randomChars2 = randomChars1.ToUpper();
            string randomChars3 = "!@#$%^&*()";
            string randomChars = randomChars1;
            string password = string.Empty;
            int randomNum;
            Random random = new Random();

            randomNum = random.Next(randomChars2.Length);
            password += randomChars2[randomNum];
            randomNum = random.Next(randomChars3.Length);
            password += randomChars3[randomNum];
            for (int i = 0; i < passwordLen - 2; i++)
            {
                randomNum = random.Next(randomChars.Length);
                password += randomChars[randomNum];
            }

            return password;
        }

        //reset password
        //len is then length of your new password
        public static string RestPwd(string name, int len)
        {
            string pwd = GetRandomPassword(len);
            RestPwd(name, pwd);
            return pwd;
        }

        //use a specified to change your password
        public static void RestPwd(string name,string newPwd)
        {

            var directoryEntry = FindByName(name);
            directoryEntry.Invoke("SetPassword", new object[] { newPwd });
            directoryEntry.Properties["LockOutTime"].Value = 0;
            directoryEntry.Close();
        }

        public static DirectoryEntry createDirectoryEntry(string admin, string pwd)
        {
            DirectoryEntry ldapConnection = new DirectoryEntry();
            ldapConnection.Path = path;
            ldapConnection.AuthenticationType = AuthenticationTypes.Secure;
            ldapConnection.Username = admin;
            ldapConnection.Password = pwd;
            return ldapConnection;
        }

        public static DirectoryEntry FindByName(string name)
        {
            var de = createDirectoryEntry(admin, pwd);
            DirectorySearcher search = new DirectorySearcher(de);
            if (name.Contains(" "))
            {
                search.Filter = "(cn=" + name + ")";//this is a display name,it usually contains a ' ',for instance:'Jack Brown'
            }
            else
            {
                search.Filter = "(mailNickname=" + name + ")";//the email,for instance:'jackbrown'
            }
            SearchResult result = search.FindOne();
            if (result != null)
                return result.GetDirectoryEntry();
            else
                return null;
        }


        //modify mobile number
        public static bool SetMobile(string name, string mobile)
        {
            try
            {
                var de = FindByName(name);
                de.Properties["mobile"].Value = mobile;
                de.CommitChanges();
                return true;
            }
            catch
            {
                return false;
            }
        }



    }


}

 ============在web环境下 需要提升权限来运行================

===========You have to improve your permission(impersonate an administrator) ==========================

 

    public class Helper
    {
        //public static string path = "LDAP://192.168.8.1";   //the IP address point to your domain server 
        public static string path = "LDAP://192.168.8.96";   //the IP address point to your domain server 
        public static string admin = "administrator";       //administrator name
        public static string domain = "Abc.local";             //domain name
        public static string pwd = "abcdefg";               //the password for the previous user

        //create a random password,it at least has 3 characters
        //the first character is a upper letter
        //the second character is a special letter,such as !,@,# ...
        //the reset of the characters are lower letters
        public static string GetRandomPassword(int passwordLen)
        {
            System.Threading.Thread.Sleep(15);
            string randomChars1 = "abcdefghijklmnopqrstuvwxyz";
            string randomChars2 = randomChars1.ToUpper();
            string randomChars3 = "!@#$%^&*()";
            string randomChars = randomChars1;
            string password = string.Empty;
            int randomNum;
            Random random = new Random();

            randomNum = random.Next(randomChars2.Length);
            password += randomChars2[randomNum];
            randomNum = random.Next(randomChars3.Length);
            password += randomChars3[randomNum];
            for (int i = 0; i < passwordLen - 2; i++)
            {
                randomNum = random.Next(randomChars.Length);
                password += randomChars[randomNum];
            }

            return password;
        }

        //reset password
        //len is then length of your new password
        public static string RestPwd(string name, int len)
        {
            string pwd = GetRandomPassword(len);
            if (RestPwd(name, pwd))
                return pwd;
            else
                return null;
        }

        //use a specified to change your password
        public static bool RestPwd(string name, string newPwd)
        {
            bool result = true;
            try
            {
                IntPtr accessToken = IntPtr.Zero;
                if (LogonUser(Helper.admin, Helper.domain, Helper.pwd, LOGON_TYPE_INTERACTIVE, LOGON_TYPE_PROVIDER_DEFAULT, ref accessToken))
                {
                    using (WindowsIdentity identity = new WindowsIdentity(accessToken))
                    {
                        using (WindowsImpersonationContext context = identity.Impersonate())
                        {

                            var directoryEntry = FindByName(name);
                            if (directoryEntry != null)
                            {

                                directoryEntry.Invoke("SetPassword", new object[] { newPwd });
                                directoryEntry.Properties["LockOutTime"].Value = 0;
                                directoryEntry.Close();
                            }

                        }
                    }
                }
            }
            catch(Exception ex){
                result=false;
            }
            return result;

        }

        public static DirectoryEntry createDirectoryEntry(string admin, string pwd)
        {
            DirectoryEntry ldapConnection = new DirectoryEntry();
            ldapConnection.Path = path;
            ldapConnection.AuthenticationType = AuthenticationTypes.Secure;
            ldapConnection.Username = admin;
            ldapConnection.Password = pwd;
            return ldapConnection;
        }

        public static DirectoryEntry FindByName(string name)
        {
            var de = createDirectoryEntry(admin, pwd);
            DirectorySearcher search = new DirectorySearcher(de);
            if (!name.Contains(" "))
            {
                search.Filter = "(cn=" + name + ")";//this is a display name,it usually contains a ' ',for instance:'Jack Brown'
                //HttpContext.Current.Response.Write("search.Filter:" + search.Filter);
            }
            else
            {
                search.Filter = "(mailNickname=" + name + ")";//the email,for instance:'jackbrown'
                //HttpContext.Current.Response.Write("search.Filter:" + search.Filter);
            }
            SearchResult result = search.FindOne();
            if (result != null)
            {
                return result.GetDirectoryEntry();
            }
            else
            {
                return null;
            }
        }


        //modify mobile number
        public static bool SetMobile(string name, string mobile)
        {
            try
            {
                var de = FindByName(name);
                de.Properties["mobile"].Value = mobile;
                de.CommitChanges();
                return true;
            }
            catch
            {
                return false;
            }
        }



    }