C# ActiveDirectory - 如何将本地用户帐户从加入域的计算机远程添加到非域计算机

Question

我正在尝试在未加入域的计算机上添加本地用户帐户。我已经尝试了几乎所有我能想到的东西。我在同一个域中的机器上工作，但不在域外机器上。我可以 ping 和 TS 到此服务器，但似乎无法添加管理员。

是否可以使用 DirectoryEntry 来执行此操作？

这是我目前拥有的代码（为了便于阅读，稍作改动）：

    private string AddLocalAdmin_NonDomain(string ComputerName)
    {
        StartImpersonation(); //Uses advapi32.dll->LogonUser()
        string ErrMsg = "";
        const int ADS_UF_DONT_EXPIRE_PASSWD = 0x10000;
        DirectoryEntry AD = new DirectoryEntry("WinNT://" + ComputerName + ",computer", ComputerName + "\\" + UserCredentials.Username, UserCredentials.Password);
        object n = AD.NativeObject;
        DirectoryEntry NewUser = AD.Children.Add(Username, "user");
        NewUser.Invoke("SetPassword", new object[] { Password });
        if (!PasswordExpires)
        {
            int val = ADS_UF_DONT_EXPIRE_PASSWD;
            NewUser.InvokeSet("userFlags", new object[] { val });
        }
        NewUser.CommitChanges();
        DirectoryEntry grp;
        grp = AD.Children.Find("Administrators", "group");
        if (grp != null) { grp.Invoke("Add", new object[] { NewUser.Path.ToString() }); }
        EndImpersonation(); //Ends the impersonation
        return ErrMsg; //returns "Access Denied"
    }

Answer 1

你可以使用

System.DirectoryServices.AccountManagement

为了实现这里是代码

PrincipalContext oPrincipalContext = new PrincipalContext(ContextType.Machine);

//Create New User
UserPrincipal oUserPrincipal = new UserPrincipal(oPrincipalContext, "Your UserName", "Your Password", true /*Enabled or not*/);

oUserPrincipal.UserPrincipalName = "Your UserName";
oUserPrincipal.GivenName = "Given Name";
oUserPrincipal.Surname = "Surname";
oUserPrincipal.Save();

//Add User to Group
GroupPrincipal oGroupPrincipal = GroupPrincipal.FindByIdentity(oPrincipalContext, "Your Group Name");
oGroupPrincipal.Members.Add(oUserPrincipal);
oGroupPrincipal.Save();

如需完整实现，请前往http://anyrest.wordpress.com/2010/06/28/active-directory-c/