Convert Distinguished Name to Canonical Name

c#,active-directory,directoryservices,directoryentry

It's a constructed attribute. On a DirectoryEntry, you need to use RefreshCache: var de = new DirectoryEntry("CN=Murdock\, James,OU=Disabled Users,OU=GOG,DC=contoso,DC=local"); de.RefreshCache(new string[] {"canonicalName"}); ...

Cannot set password with DirectoryEntry.Invoke when user is created in AD using ASP.NET C#

c#,asp.net,active-directory,passwords,directoryentry

The problem is solved. Apparently the account for Internet Information Services (IIS_IUSRS) did not have permissions to SET Passwords for Active directory. It could CHANGE passwords but not SET them. To allow an ASP.NET page to SET an AD Password on account creation, I had to run "Active Directory Users...

How does InvokeMember know about the HighPart property?

reflection,directoryservices,directoryentry

It's defined in the IADsLargeInteger, which is a COM interface. http://msdn.microsoft.com/en-us/library/aa706037%28v=vs.85%29.aspx To get rid of ActiveDs, you may defined the type yourself (C#): [ ComImport, InterfaceType(ComInterfaceType.InterfaceIsIDispatch), Guid("9068270B-0939-11D1-8BE1-00C04FD8D503") ] public interface IADsLargeInteger { int HighPart{get;set;} int LowPart{get;set;} } private long? GetLargeInt(DirectoryEntry de, string attrName) { long? ret = null; IADsLargeInteger largeInt...