Last post Oct 09, 2017 02:13 AM by Jean Sun
Oct 08, 2017 09:29 AM|alihusain_77|LINK
I am querying the Active Directory for information about the user email and other properties. I know how to perform this. However, my website should have permission to access the server that host the active directory. Should I make it by the Application
pool identity or using another technique?
Oct 08, 2017 09:44 AM|PatriceSc|LINK
Not sure if a local account has access to that or can be granted access. You could also create a domain account for this purpose and use this particular account to connect to AD (if I remember by using the proper parameters when construction your PrincipalContext).
What is the current situation for now ?
Oct 08, 2017 10:35 AM|alihusain_77|LINK
I created a domain account and set the Application Pool Identity property to Custom account and then used the created Domain username as the User Name field. However, the Password and Confirm Password not accepting the password assigned
to the new domain account
Oct 08, 2017 11:38 AM|PatriceSc|LINK
Could it be that the account is configured to force a password change on the next logon ?
You could also keep the current application pool settings and use this account with
https://msdn.microsoft.com/en-us/library/bb356158(v=vs.110).aspx when connecting to AD.
Oct 09, 2017 02:13 AM|Jean Sun|LINK
However, the Password and Confirm Password not accepting the password assigned to the new domain account
Is there any error message?
Please try check if you have "Access this computer from the network" user right in group policy via Group Policy -> Computer Configuration -> Policies -> Windows Settings -> Security Settings -> Local Policies -> User Rights Assignment.