«

I'm trying to get user details using ASP under IIS (Win2000) with the
following code:

Set User = GetObject("WinNT://domainname/" & mid(strNTUser, & ",user")
strNTUserFullName= User.Fullname

The website this is running under uses Windows Authentication only (no
anonymous logins) and this presumably is why I get the error 'General access
denied error' from AD as the logged in user's credentials are not passed to
the AD domain controller that is being queried for the users details.

My question is, how to I get this to work whilst keeping Windows
Authentication? I only need the most basic details about the user so writing
LDAP queries and creating recordsets etc seems like overkill and presumably
the same problem will occur?

Hi,

As far as I have worked with LDAP stuff, it requires the username and
password to be passed to successfully connect to the server where your AD is.
This username and password should be the authetication details of a user who
has all rights to manipulate or access / query the AD, mostly an
administrator group level user. So I think you need to supply the
authentication details to work on LDAP.

Ganesh

"A Lake" wrote:

> I'm trying to get user details using ASP under IIS (Win2000) with the
> following code:
>
> Set User = GetObject("WinNT://domainname/" & mid(strNTUser, & ",user")
> strNTUserFullName= User.Fullname
>
> The website this is running under uses Windows Authentication only (no
> anonymous logins) and this presumably is why I get the error 'General access
> denied error' from AD as the logged in user's credentials are not passed to
> the AD domain controller that is being queried for the users details.
>
> My question is, how to I get this to work whilst keeping Windows
> Authentication? I only need the most basic details about the user so writing
> LDAP queries and creating recordsets etc seems like overkill and presumably
> the same problem will occur?
>