Using Active Directory

This section provides guidelines for writing applications that use or publish data in a Microsoft® Active Directory® directory service.

Active Directory is compliant with Lightweight Directory Access Protocol (LDAP) 3.0, which is defined by RFC 2251 and other RFCs. Any of the following API sets can be used to access Active Directory. Each API set has advantages and disadvantages that depend on the programming language, programming environment, and intended method of execution. The majority of the examples in this guide use ADSI, which is supported by languages such as C and C++, as well as automation-compliant languages such as Microsoft® Visual Basic® and Microsoft Visual Basic Scripting Edition (VBScript).

• Lightweight Directory Access Protocol
• Active Directory Service Interfaces
• System.DirectoryServices

This section discusses the following topics:

• Binding to Active Directory
• Searching Active Directory
• Creating and Deleting Active Directory Objects
• Reading and Writing Attributes of Active Directory Objects
• Controlling Access to Active Directory Objects
• Extending the Schema
• Extending the User Interface for Directory Objects
• Replication and Data Integrity
• Managing Users
• Managing Groups
• Tracking Changes
• Service Publication
• Service Logon Accounts
• Mutual Authentication Using Kerberos
• Backing Up and Restoring Active Directory
• Storing Dynamic Data
• Application Directory Partitions