讀取使用者無法變更密碼 (WinNT 提供者)
用戶變更自己的密碼的能力是可以授與或拒絕的許可權。 若要判斷使用者是否已使用 WinNT 提供者授與此許可權,請閱讀用戶物件的 userFlags 屬性ADS_UF_PASSWD_CANT_CHANGE旗標。 ADS_UF_PASSWD_CANT_CHANGE旗標定義於 ADS_USER_FLAG_ENUM 列舉中。
範例程式碼
下列程式代碼範例示範如何取得用戶物件的 userFlags 屬性ADS_UF_PASSWD_CANT_CHANGE旗標。
Const ADS_UF_PASSWD_CANT_CHANGE = &H40
Function UserCannotChangePassword(strDomain As String, strUser As String, strUserCred As String, strPassword As String) As Boolean
UserCannotChangePassword = False
Dim oUser As IADs
strPath = "WinNT://" + strDomain + "/" + strUser
If "" <> strUserCred Then
Dim dso As IADsOpenDSObject
' Bind to the group with the specified user name and password.
Set dso = GetObject("WinNT:")
Set oUser = dso.OpenDSObject(strPath, strUserCred, strPassword, 1)
Else
' Bind to the group with the current credentials.
Set oUser = GetObject(strPath)
End If
If (oUser.Get("userFlags") And ADS_UF_PASSWD_CANT_CHANGE) <> 0 Then
UserCannotChangePassword = True
Else
UserCannotChangePassword = False
End If
End Function
下列程式代碼範例示範如何取得用戶物件的 userFlags 屬性ADS_UF_PASSWD_CANT_CHANGE旗標。
//***************************************************************************
//
// UserCannotChangePassword()
//
//***************************************************************************
HRESULT UserCannotChangePassword(LPCWSTR pwszDomain,
LPCWSTR pwszUser,
LPCWSTR pwszUserCred,
LPCWSTR pwszPassword,
BOOL *pfCannotChangePassword)
{
if(NULL == pwszDomain || NULL == pwszUser)
{
return E_INVALIDARG;
}
*pfCannotChangePassword = FALSE;
HRESULT hr;
IADs *pads;
CComBSTR sbstrADsPath = L"WinNT://";
sbstrADsPath += pwszDomain;
sbstrADsPath += "/";
sbstrADsPath += pwszUser;
hr = ADsOpenObject( sbstrADsPath,
pwszUserCred,
pwszPassword,
ADS_SECURE_AUTHENTICATION,
IID_IADs,
(void**)&pads);
if(SUCCEEDED(hr))
{
CComVariant svar;
hr = pads->Get(CComBSTR("userFlags"), &svar);
if(SUCCEEDED(hr))
{
if(ADS_UF_PASSWD_CANT_CHANGE & svar.lVal)
{
*pfCannotChangePassword = TRUE;
}
else
{
*pfCannotChangePassword = FALSE;
}
}
pads->Release();
}
return hr;
}