Active Directory vb.net (Visual Studio 2005) question...

dsUser = cnEntry.Children.Add("CN=" & userName, "user")

If middleInitDisplay.Length > 0 Then 'This statement handles an empty middle initial value

'General Tab

dsUser.Properties.Item("initials").Value = UCase(Left(middleInitDisplay, 1))

End If

'Add user properties - organized and commented per Active Directory Users & Computers UI tool

With dsUser.Properties

'General Tab

.Item("givenname").Value = firstNameDisplay

.Item("sn").Value = lastNameDisplay

.Item("displayname").Value = displayName.Trim() 'If no middle initial is present this trim remove extra spaces

.Item("description").Value = "Student"

.Item("mail").Value = email

'Address Tab - used only for processing items

.Item("xx").Value = "xx" 'KEYs removed for security purposes (hence "xx")

.Item("xx").Value = xx

'Account Tab

.Item("userprincipalname").Value = email

.Item("sAMAccountName").Value = userName

.Item("accountexpires").Value = GetLargeInteger(expireDate64) 'idli

'Profile Tab

'.Item("profilepath").Value = "\\xx\xx$\" & userName 'Disable roaming profiles

.Item("homedrive").Value = "H:"

.Item("homedirectory").Value = "\\xx\xx$\" & userName

End With

'dsUser.Invoke("SetPassword", password) 'Early bound vs late binding below (will fail Option Strict)

With dsUser

.CommitChanges()

.NativeObject.setPassword(password)

.NativeObject.accountDisabled = False

End With

'Assign the student to the Student group

studentGroupEntry.CommitChanges()

'Create a mailbox for the student

cmdEM.Parameters.Clear() 'Clear out entries from the last student

cmdEM.Parameters.Add("Database", mailDB)

cmdEM.Parameters.Add("Identity", email) 'The email variable contains the User Principle Name (UPN)

cmdEM.Parameters.Add("Alias", userName) 'Specified in the format xx

cmdEM.Parameters.Add("DomainController", dnsHostFQDName) 'FQDN from rootDSE

cmdResults = ems.PipelineInvoke(cmdEM, CObj(iErrors))

For Each cmdItem In cmdResults

Console.WriteLine(cmdItem.Members("Name").Value.ToString)

Next

'Check for pipeline errors

If Not iErrors Is Nothing Then

For Each errorItem In iErrors

Console.WriteLine("Error encountered creating the mailbox: {0} for display name {1} / EmplID: {2}", errorItem.ToString, displayName, emplId)

Dim adMsg As String = ("Error encountered creating the mailbox: " & errorItem.ToString & " for display name " & displayName & " / EmplID: " & emplId)

EventLog.WriteEntry("ADStudentUpdate", adMsg, EventLogEntryType.Error)

' ADLogInstance.WriteEntry("ADStudentUpdate", adMsg, EventLogEntryType.Warning)

Next

'Verify that a mailbox was created

ElseIf cmdResults.Count < 1 Then

Console.WriteLine("Mailbox not created for display name {0} / EmplID: {1}", displayName, emplId)

Dim adMsg As String = ("Mailbox not created for display name " & displayName & " / EmplID: " & emplId)

EventLog.WriteEntry("xx", adMsg, EventLogEntryType.Error)

ADLogInstance.Close()

'If the mailbox was created update the status code of the associated account in Active Directory

Else

dsUser.Properties.Item("xx").Value = "xx" 'KEYs removed for security purposes

End If

'SEARCH FOR THE STUDENT BY COMMON NAME (CN) WITHIN ACTIVE DIRECTORY

Using duplSearcher As DirectorySearcher = New DirectorySearcher(cnEntry)

duplSearcher.Filter = "(&(objectCategory=person)(objectClass=user)(cn=" & userName & "))"

duplSearcher.PropertiesToLoad.Add("xx")

duplSearcher.SearchScope = SearchScope.OneLevel

Dim duplADSearchResultCollection As SearchResultCollection = duplSearcher.FindAll()

'Create a Directory Entry and bind to the Student OU within the domain path

'A "Using" stmt is incorporated so the cnEntry is cached making subsequent searches

'faster

Using cnEntry As DirectoryEntry = New DirectoryEntry( _

"LDAP://OU=Accounts - xx," & domainPath, _

Nothing, _

Nothing, _

AuthenticationTypes.Secure) ' Default for .Net 2.0, indicated for clarity

cnEntry.RefreshCache() 'Will quickly force a bind to the directory

'OBTAIN ALL THE ACTIVE DIRECTORY ENTRIES FOR THE xx OU

'Obtain the directory information tree root - this eliminates hard coding domain controller names

'The rootDSE entry is left open so that the connection can be used for subsequent binds

Dim rootDSE As DirectoryEntry = New DirectoryEntry( _

"LDAP://RootDSE", _

Nothing, _

Nothing, _

AuthenticationTypes.Secure)

'Force the connection to be established to quickly bind to the directory

Dim bindTest As Object = rootDSE.NativeObject

'Obtain the domain naming context (DC=xx,DC=xx,DC=xx)

Dim domainPath As String = rootDSE.Properties("defaultNamingContext")(0)