NT Users and ASP

[idover]

this may be silly, but oh well, i'm no network guru... i'm hoping there's a way to manage users on an NT server via asp... i would assume that there's some com object that allows this, but i've had little luck in locating anything... i would need the ability to add/delete/modify user info via asp... any help or direction is greatly appreciated, thanks in advance!

[JoshT]

You could write a COM DLL in VB that wraps the API calls you would need to do this for access via ASP. Actually, I think Win2K has an Active Directory COM object that'll do it. Also, make sure you pay close attention to security here.

[idover]

thanks for the reply!... that's what i was thinking i would have to do... and as for security... is it possible to make these sort of changes from another machine?... sorry, but my nt admin experience is limited to only iis/sql administration...

[idover]

forgot to ask... where can i descriptions of the api calls that i will need to use?... thanks!

[JoshT]

forgot to ask... where can i descriptions of the api calls that i will need to use?... thanks!

MSDN has them all. You might want to look at the VB API sites first, though.

As for security, the API calls would have to be made with a User Account that has the permissions to administer users, usually someone from the domain admins group. It'll be tricky because IIS runs as the Local System account (by default) and impersonates either an anonyous user account or another user, and you have to make sure the method you implement it doesn't allow less priveledged users from escalating their rights and being able to admin the users.