Chris May

Finally! I can't express how happy I was when I got this code to finally work correctly.

I was a combination of things that fixed my problem.

1. I changed my login to use the full domain login Domain\UserName
2. I changed the security context of the IIS account (IWAM_something I think) This might not have had any impact. After changing this, I was still required to supply my username and password when accessing the directory. After I stopped working I thought that maybe the ASP.NET worker thread was what I needed to change, not the IIS default user account.
3. When you create a new user through LDAP, they appear as "CN=MyNewUser", however, "MyNewUser" is not their username as one might expect. Instead it is their "SAMAccountName", or something like that, which is a property that you have to set, but that I didn't really pay much attention to.
4. The domain controller that I was looking at was never the one that was first updated, so there was often a large disconnect between what I was doing in code, and what I was seeing on the domain controller.

There really isn't enough documentation out there about the System.DirectoryServices.DirectoryEntry class, but I managed, after a long struggle.

Here are some other links that I found useful when researching this problem:

Managing Passwords
Active Directory Hierarchy
Creating a User
.NET
newsgroup posting
MS Support Document
Creating ADSI Components