![](https://i-blog.csdnimg.cn/blog_migrate/8f900a89c6347c561fdf2122f13be562.gif)
![](https://i-blog.csdnimg.cn/blog_migrate/961ddebeb323a10fe0623af514929fc1.gif)
public class DirectoryHelper { public static string DomainName = System.Environment.UserDomainName; public static string strLDAP = "LDAP://" + DomainName; static DirectoryEntry de = new DirectoryEntry(strLDAP); /// <summary> /// 根据登录名获取用户域fullname /// </summary> /// <param name="AccountName"></param> /// <returns></returns> public static string getFullNameByAccountName(string AccountName) { string FullName = string.Empty; DirectorySearcher ds = new DirectorySearcher(de); ds.Filter = string.Format("(SAMAccountName={0})", AccountName); using (HostingEnvironment.Impersonate()) { foreach (SearchResult sr in ds.FindAll()) { string fullName = sr.GetDirectoryEntry().Name.ToString(); //if (sr.GetDirectoryEntry().Properties["samaccountname"].Value.ToString().ToLower() == AccountName) //{ FullName = fullName.Substring(3, fullName.Length - 3); // } } } return FullName; } /// <summary> /// 获取所有用户 /// </summary> /// <returns></returns> public static DataTable getAllPeople() { DataTable dt = new DataTable(); DataColumn dc_accountName = new DataColumn("AccountName", typeof(string)); DataColumn dc_mail = new DataColumn("Mail", typeof(string)); DataColumn dc_fullName = new DataColumn("FullName", typeof(string)); dt.Columns.Add(dc_fullName); dt.Columns.Add(dc_accountName); dt.Columns.Add(dc_mail); DirectorySearcher search = new DirectorySearcher(de); search.Filter = "(&(objectClass=user))"; search.SearchScope = SearchScope.Subtree; //模拟用户登录(发布的时候不添加要报错) using (HostingEnvironment.Impersonate()) { SearchResultCollection SearchResults = search.FindAll(); if (SearchResults.Count > 0) { foreach (SearchResult sr in SearchResults) { DirectoryEntry GroupEntry = sr.GetDirectoryEntry(); string accountName = string.Empty; string fullName = string.Empty; string mail = string.Empty; DataRow dr = dt.NewRow(); //先获取邮件属性,如果邮件不是空,说明是要取的部门 if (GroupEntry.Properties.Contains("mail")) { mail = GroupEntry.Properties["mail"][0].ToString(); dr["Mail"] = mail; if (GroupEntry.Properties.Contains("SAMAccountName")) { accountName = GroupEntry.Properties["SAMAccountName"][0].ToString(); dr["AccountName"] = accountName; } if (GroupEntry.Properties.Contains("Name")) { fullName = GroupEntry.Properties["Name"][0].ToString(); dr["FullName"] = fullName; } dt.Rows.Add(dr); } } } } return dt; } /// <summary> /// 根据全名获取登录名 /// </summary> /// <param name="fullName"></param> /// <returns></returns> public static string getAccountNameByFullName(string fullName) { string accountName = string.Empty; DirectorySearcher ds = new DirectorySearcher(de); ds.Filter = string.Format("(cn={0})", fullName); using (HostingEnvironment.Impersonate()) { SearchResult sr = ds.FindOne(); if (sr != null) { if (sr.GetDirectoryEntry().Properties.Contains("samaccountname")) { accountName = sr.Properties["samaccountname"][0].ToString(); //accountName = accountName.Substring(3, accountName.Length - 3); } } } return accountName; } /// <summary> /// 判断用户是否存在 /// </summary> /// <param name="FullName"></param> /// <returns></returns> public static bool checkUserExist(string FullName) { bool Exist = false; DirectorySearcher deSearch = new DirectorySearcher(de); deSearch.Filter = "(&(&(objectCategory=person)(objectClass=user))(cn=" + FullName + "))"; deSearch.SearchScope = SearchScope.Subtree; //模拟用户登录(发布的时候不添加要报错) using (HostingEnvironment.Impersonate()) { SearchResult result = deSearch.FindOne(); if (result != null) { Exist = true; } return Exist; } } #region 根据登录名获取用户所在组 public static DataTable getGroupByAccountName(string AccountName) { DataTable dt = new DataTable("group"); DataColumn groupName = new DataColumn("Name", typeof(string)); dt.Columns.Add(groupName); DirectorySearcher search = new DirectorySearcher(de); search.Filter = "(&(sAMAccountName=" + AccountName + "))"; search.PropertiesToLoad.Add("memberof"); using (HostingEnvironment.Impersonate()) { SearchResult result = search.FindOne(); if (result == null) { DataRow dr = dt.NewRow(); dr["Name"] = "暂无数据"; dt.Rows.Add(dr); } else { string[] results = new string[result.Properties["memberof"].Count + 1]; for (int i = 0; i < result.Properties["memberof"].Count; i++) { string theGroupPath = result.Properties["memberof"][i].ToString(); string tempName = theGroupPath.Substring(3, theGroupPath.IndexOf(",") - 3); if (tempName == "全体员工" || tempName == "VPN"||tempName=="经理级人员") { } else { DataRow dr = dt.NewRow(); dr["Name"] = theGroupPath.Substring(3, theGroupPath.IndexOf(",") - 3); dt.Rows.Add(dr); } } } } return dt; } #endregion #region 获取it部门成员 public static DataTable getAllMembersByGroupName(string GroupName) { DataTable dt_ItMembers = new DataTable(); DataColumn dc_ItMembers = new DataColumn("Name", typeof(string)); dt_ItMembers.Columns.Add(dc_ItMembers); DirectorySearcher search_ItMember = new DirectorySearcher(de); search_ItMember.Filter = "(&(objectClass=group)(cn=" + GroupName + "))"; //模拟用户登录(发布的时候不添加要报错) using (HostingEnvironment.Impersonate()) { SearchResult search_It = search_ItMember.FindOne(); if (search_It != null) { int memberCount = search_It.Properties["member"].Count; for (int i = 0; i < memberCount; i++) { if (!string.IsNullOrEmpty(search_It.Properties["member"][i].ToString())) { string name = search_It.Properties["member"][i].ToString(); name = name.Substring(3, name.IndexOf(",") - 3); DataRow dr_itMembersName = dt_ItMembers.NewRow(); dr_itMembersName["Name"] = name; dt_ItMembers.Rows.Add(dr_itMembersName); } } } else { DataRow dr_none = dt_ItMembers.NewRow(); dr_none["Name"] = "暂无数据"; dt_ItMembers.Rows.Add(dr_none); } } return dt_ItMembers; } #endregion #region 获取所有部门 public static DataTable getAllGroup() { DataTable dt_group = new DataTable(); DataColumn dc_group = new DataColumn("GroupName", typeof(string)); dt_group.Columns.Add(dc_group); DirectorySearcher search_ItMember = new DirectorySearcher(de); search_ItMember.Filter = "(&(objectClass=group))"; search_ItMember.SearchScope = SearchScope.Subtree; //模拟用户登录(发布的时候不添加要报错) using (HostingEnvironment.Impersonate()) { SearchResultCollection SearchResults = search_ItMember.FindAll(); if (SearchResults.Count > 0) { foreach (SearchResult sr in SearchResults) { DirectoryEntry GroupEntry = sr.GetDirectoryEntry(); //先获取邮件属性,如果邮件不是空,说明是要取的部门 if (GroupEntry.Properties.Contains("mail")) { string mail = GroupEntry.Properties["mail"][0].ToString(); if (!string.IsNullOrEmpty(mail)) { string groupName = string.Empty; if (GroupEntry.Properties.Contains("Name")) { groupName = GroupEntry.Properties["Name"][0].ToString(); } DataRow dr_group = dt_group.NewRow(); dr_group["GroupName"] = groupName; dt_group.Rows.Add(dr_group); } } } } } return dt_group; } #endregion #region 根据全名获取邮箱 public static string getMailByFullName(string fullName) { string mail = string.Empty; DirectorySearcher ds = new DirectorySearcher(de); ds.Filter = "(&(cn=" + fullName + "))"; using (HostingEnvironment.Impersonate()) { SearchResult result = ds.FindOne(); if (result != null) { mail = result.Properties["mail"][0].ToString(); } return mail; } } #endregion /// <summary> /// 判断是不是IT部门的人 /// </summary> /// <param name="AccountName"></param> /// <returns></returns> public static bool IsItGroup(string AccountName) { bool IsItGroupMember = false; DirectorySearcher search = new DirectorySearcher(de); search.Filter = "(&(sAMAccountName=" + AccountName + "))"; search.PropertiesToLoad.Add("memberof"); using (HostingEnvironment.Impersonate()) { SearchResult result = search.FindOne(); if (result != null) { for (int i = 0; i < result.Properties["memberof"].Count; i++) { string theGroupPath = result.Properties["memberof"][i].ToString(); if (theGroupPath.Substring(3, theGroupPath.IndexOf(",") - 3) == "IT") { IsItGroupMember = true; return IsItGroupMember; } } } } return IsItGroupMember; } }
调用:
//获取当前登录电脑的用户名
string name = System.Environment.UserName.ToLower();
string fullname= DirectoryHelper.getFullNameByAccountName(System.Environment.UserName.ToLower());
bool b_ITGroupMember = DirectoryHelper.IsItGroup(name);
发布到IIS上后要修改IIS配置
ASP.NET impersonation和window authentication设置成启用,
其他的Annoymous authentication都设置成禁用
应用程序池设置成经典