public void CreateGroup(Group group)
{
// By default, all groups will go into the GroupsOU
using (PrincipalContext context = new PrincipalContext(ContextType.Domain, ServerName, GroupsOU, ContextOptions.Negotiate, ServiceUser, ServicePassword))
{
using (GroupPrincipalEx newGroup = new GroupPrincipalEx(context))
{
newGroup.Name = group.GroupName;
newGroup.SamAccountName = group.GroupName;
newGroup.Info = group.Description;
newGroup.Save();
}
}
}
/// <summary>
/// Updates the specified group in the domain. If the oldGroupName parameter
/// is not null then it means that the name of the group has changed.
/// </summary>
/// <param name="group"></param>
/// <param name="oldGroupName"></param>
public void UpdateGroup(ADGroup group, string oldGroupName = null)
{
using (PrincipalContext groupContext = new PrincipalContext(ContextType.Domain, ServerName, null, ContextOptions.Negotiate, ServiceUser, ServicePassword))
{
if (!string.IsNullOrWhiteSpace(oldGroupName))
{
using (GroupPrincipalEx adGroup = GroupPrincipalEx.FindByIdentity(groupContext, oldGroupName))
{
if (adGroup != null)
{
// If we have gotten to this section, then it means that the name of the
// group has been changed by the user. If so then we'll have to use the
// underlying DirectoryEntry objec to rename the account. Note: the format
// for the new name has to start with 'cn=<new_group_name>' or else the
// code would throw an error message.
var groupEntry = (DirectoryEntry)adGroup.GetUnderlyingObject();
groupEntry.Rename("cn=" + group.GroupName);
groupEntry.CommitChanges();
// These are just two additioanl properties that also have
// to change but we don't have to use the underlying object
// to make the change.
adGroup.SamAccountName = group.GroupName;
adGroup.DisplayName = group.GroupName;
// The user may have also changed the description, if so then
// let's update this just in case so that nothing is lost.
//adGroup.Description = group.Description;
adGroup.Info = group.Description;
adGroup.Save();
}
}
}
else
{
// Only the description of the group will be changing
using (GroupPrincipalEx adGroup = GroupPrincipalEx.FindByIdentity(groupContext, group.GroupName))
{
if (adGroup != null)
{
adGroup.Info = group.Description;
adGroup.Save();
}
}
}
}
}