前段时间研究了LDAP用户集成的一些内容，下面是我经过多次google后，自己写的一份操作Windows域的代码，

这是操作domain的类：

　 private string _Domain;
    private string AdUser;
    private string AdPwd;
    private string _prefixPath = "LDAP://";
    private string _suffixPath;
 public OperateDomain()
 {
        _Domain = System.Configuration.ConfigurationManager.AppSettings["Domain"].ToString();
        AdUser = System.Configuration.ConfigurationManager.AppSettings["ADAdminUser"].ToString();
        AdPwd = System.Configuration.ConfigurationManager.AppSettings["ADAdminPassword"].ToString();
        _suffixPath = "DC=" + _Domain + ",DC=COM";
 }

/// <summary>
    /// 添加用户
    /// </summary>
    /// <param name="directoryType">父节点的类型</param>
    /// <param name="parentNode">父节点名称</param>
    /// <param name="user">用户</param>
    /// <returns></returns>
    private string AdAddUser( DomainUser user)
    {
        string path = FormatPath(DomainUser._cn, "users");
        try
        {
            DirectoryEntry Entry = new DirectoryEntry(path, AdUser, AdPwd, AuthenticationTypes.Secure);
            DirectoryEntry NewUser = Entry.Children.Add("cn=" + user.UserId, "User");

            NewUser.Properties["userPrincipalName"].Value = user.UserPrincipalName;
            NewUser.Properties["name"].Value = user.UserId;
            NewUser.Properties["sn"].Value = user.UserId;
            NewUser.Properties["displayName"].Value = user.UserName;
            NewUser.Properties["samAccountName"].Value = user.UserId;
            NewUser.Properties["Department"].Value = user.Department;
            //NewUser.Properties["telephoneNumber"].Value = user.Telephone;
            //NewUser.Properties["mail"].Value = user.Email;
            if (user.Telephone != null && user.Telephone != "")
            {
                NewUser.Properties["telephoneNumber"].Value = user.Telephone;
            }
            //else
            //{
            //    NewUser.Properties["telephoneNumber"].Value = null;
            //}
            if (user.Email != null && user.Email != "")
            {
                NewUser.Properties["mail"].Value = user.Email;
            }
            //else
            //{
            //    NewUser.Properties["mail"].Value = null;
            //}
            if (user.Description != null && user.Description != "")
            {
                NewUser.Properties["description"].Value = user.Description;
            }
            //else
            //{
            //    NewUser.Properties["description"].Value = null;

            //}
            NewUser.CommitChanges();

            SetAdPassword(user.UserId, user.Password);
            EnableUser(user.UserId);
            Entry.Close();

            return DomainUser._success;
        }
        catch (Exception ex)
        {
            LogManage.SaveInfo(ex.ToString());
            return DomainUser._failed;
        }
    }
    /// <summary>
    /// 修改帐户信息
    /// </summary>
    /// <param name="user"></param>
    /// <returns></returns>
    private string ModifyADUser(DomainUser user)
    {
        try
        {
            DirectoryEntry dEntry = GetUser(user.UserId);
            DirectoryEntry Entry = new DirectoryEntry(dEntry.Path, AdUser, AdPwd, AuthenticationTypes.Secure);

            Entry.Properties["displayName"].Value = user.UserName;
            Entry.Properties["Department"].Value = user.Department;

            if (user.Telephone != null && user.Telephone != "")
            {
                Entry.Properties["telephoneNumber"].Value = user.Telephone;
            }
            else
            {
                Entry.Properties["telephoneNumber"].Value = null;
            }
            if (user.Email != null && user.Email != "")
            {
                Entry.Properties["mail"].Value = user.Email;
            }
            else
            {
                Entry.Properties["mail"].Value = null;
            }
            if (user.Description != null && user.Description != "")
            {
                Entry.Properties["description"].Value = user.Description;
            }
            else
            {
                Entry.Properties["description"].Value = null;

            }

            Entry.CommitChanges();
            Entry.Close();
            dEntry.Close();
            return DomainUser._success;
        }
        catch (Exception ex)
        {
            LogManage.SaveInfo(ex.ToString());
            return DomainUser._failed;
        }
    }
    /// <summary>
    /// 判断用户帐号是否激活
    /// </summary>
    /// <param name="username"></param>
    /// <returns>如果用户帐号已经激活，返回 true；否则返回 false</returns>
    public string IsAccountActive(string username)  
     {
        try
        {
            DirectoryEntry de = GetUser(username);
             int userAccountControl = Convert.ToInt32(de.Properties["userAccountControl"][0]);
             int userAccountControl_Disabled = Convert.ToInt32(ActiveDs.ADS_USER_FLAG.ADS_UF_ACCOUNTDISABLE);
             int flagExists = userAccountControl & userAccountControl_Disabled;

             if (flagExists > 0)
                 return LoginResult.LOGIN_USER_ACCOUNT_INACTIVE.ToString();
             else
                 return LoginResult.LOGIN_USER_ACCOUNT_ACTIVE.ToString();
         }
        catch(Exception ex)
        {
            LogManage.SaveInfo(ex.ToString());
            return ex.ToString();
        }
    }
    /// <summary>
    /// 开启用户
    /// </summary>
    /// <param name="user"></param>
    private string EnableUser(string username)
    {
        try
        {
            DirectoryEntry user = GetUser(username);
            int val = (int)user.Properties["userAccountControl"].Value;
            //用户密码永不过期
            user.Properties["userAccountControl"].Value = val & ~(int)ActiveDs.ADS_USER_FLAG.ADS_UF_ACCOUNTDISABLE | (int)ActiveDs.ADS_USER_FLAG.ADS_UF_DONT_EXPIRE_PASSWD;
            user.CommitChanges();
            user.Close();
            return DomainUser._success;

        }
        catch (Exception ex)
        {
            LogManage.SaveInfo(ex.ToString());
            return DomainUser._failed;

        }
    }
    /// <summary>
    /// 禁用/激活用户
    /// </summary>
    /// <param name="username"></param>
    private string UnenableUser(string username)
    {
        try
        {
            DirectoryEntry user = GetUser(username);
            int val = (int)user.Properties["userAccountControl"].Value;
            user.Properties["userAccountControl"].Value = val | (int)ActiveDs.ADS_USER_FLAG.ADS_UF_ACCOUNTDISABLE;

            user.CommitChanges();
            user.Close();
            return DomainUser._success;

        }
        catch (Exception ex)
        {
            LogManage.SaveInfo(ex.ToString());
            return DomainUser._failed;

        }
    }
    /// <summary>
    /// 设置密码
    /// </summary>
    /// <param name="ude">用户</param>
    /// <param name="password">密码</param>
    private string SetAdPassword(string username, string password)
    {
        try
        {
            DirectoryEntry entry = GetUser(username);
            entry.Invoke("SetPassword", new object[] { password });
            entry.CommitChanges();
            entry.Close();
            return DomainUser._success;

        }
        catch (Exception ex)
        {
            LogManage.SaveInfo(ex.ToString());
            return DomainUser._failed;

        }
    }
    /// <summary>
    /// 修改密码
    /// </summary>
    /// <param name="ude">用户</param>
    /// <param name="password">旧密码</param>
    /// <param name="password">新密码</param>
    private string ChangePassword(string username, string oldpwd, string newpwd)
    {
        try
        {
            DirectoryEntry entry = GetUser(username);
           
            entry.Invoke("ChangePassword", new object[] { oldpwd, newpwd });
            entry.CommitChanges();
            entry.Close();
            return DomainUser._success;
        }
        catch (Exception ex)
        {
            LogManage.SaveInfo(ex.ToString());
            return DomainUser._failed;
        }
    }
    /// <summary>
    /// 格式化要添加的对象是否存在的DirectoryEntry的参数Path
    /// </summary>
    /// <param name="addType">对象的类型(组织单位／组／计算机／联系人)</param>
    /// <param name="directoryType">父节点的类型</param>
    /// <param name="parentNode">父节点名称</param>
    /// <param name="ouName">节点名称</param>
    /// <returns></returns>
    private string FormatPath(string addType, string directoryType, string parentNode, string ouName)
    {
        string path = "";
        //返回存在组织单位的path
        if (addType == DomainUser._ou)
        {
            //在组织单位下面
            if (directoryType == DomainUser._ou)
            {
                path = _prefixPath + "OU=" + ouName + "," + "OU=" + parentNode + "," + _suffixPath;
            }
            //在域下面
            else
            {
                path = _prefixPath + "OU=" + ouName + "," + _suffixPath;
            }
            return path;
        }
        //返回存在（组／计算机／联系人）的path
        else if (addType == DomainUser._cn)
        {
            //在组织单位下面
            if (directoryType == DomainUser._ou)
            {
                path = _prefixPath + "CN=" + ouName + "," + "OU=" + parentNode + "," + _suffixPath;
            }
            //在文件夹下(Users)
            else if (directoryType == DomainUser._cn)
            {
                path = _prefixPath + "CN=" + ouName + "," + "CN=" + parentNode + "," + _suffixPath;
            }
            //在域下面
            else
            {
                path = _prefixPath + "CN=" + ouName + "," + _suffixPath;
            }
            return path;
        }
        else
        {
            return path;
        }
    }
    /// <summary>
    /// 格式化父节点DirectoryEntry的参数Path
    /// </summary>
    /// <param name="addType">添加对象的类型(组织单位／组／计算机／联系人)</param>
    /// <param name="directoryType">父节点的类型</param>
    /// <param name="parentNode">父节点名称</param>
    /// <returns></returns>
    private string FormatPath(string directoryType, string parentNode)
    {
        string path = "";
        ////返回组织单位的path
        //if (addType == DomainUser._ou)
        //{
        //    //在组织单位下面
        //    if (directoryType == DomainUser._ou)
        //    {
        //        path = _prefixPath + "OU=" + parentNode + "," + _suffixPath;
        //    }
        //    //在域下面
        //    else
        //    {
        //        path = _prefixPath + _suffixPath;
        //    }
        //    return path;
        //}
        //返回（组／计算机／联系人）的path
        //else if (addType == DomainUser._cn)
        //{
        //在组织单位下面
        if (directoryType == DomainUser._ou)
        {
            path = _prefixPath + "OU=" + parentNode + "," + _suffixPath;
        }
        //在文件夹下(Users)
        else if (directoryType == DomainUser._cn)
        {
            path = _prefixPath + "CN=" + parentNode + "," + _suffixPath;
        }
        //在域下面
        else
        {
            path = _prefixPath + _suffixPath;
        }
        return path;
        //}
        //else
        //{
        //    return path;
        //}
    }
    /// <summary>
    /// 从域中按照用户名查找用户
    /// </summary>
    /// <param name="username"></param>
    /// <returns></returns>
    private DirectoryEntry GetUser(string username)
    {
        string path = _prefixPath + _suffixPath;
        DirectoryEntry deuser;
        try
        {
            DirectoryEntry de = new DirectoryEntry(path, AdUser, AdPwd);
            DirectorySearcher deSearch = new DirectorySearcher(de);
            deSearch.Filter = "(&(objectClass=user)(cn=" + username + "))";
            deSearch.SearchScope = SearchScope.Subtree;
            SearchResult result = deSearch.FindOne();
            if (result != null)
            {
                deuser = result.GetDirectoryEntry();
                return deuser;
            }
            else
            {
                return null;
            }
        }
        catch(Exception ex)
        {           
            LogManage.SaveInfo(ex.ToString());
            return null;
        }
    }
    /// <summary>
    /// 判断用户是否已经存在域中
    /// </summary>
    /// <param name="userId"></param>
    /// <returns></returns>
    private bool ExitUser(string userId)
    {
        try
        {
            DirectoryEntry de = null;
            de = GetUser(userId);
            if (de == null)
            {
                return false;
            }
            else
            {
                return true;
            }
        }
        catch(Exception ex)
        {
            LogManage.SaveInfo(ex.ToString());
            return true;
        }
    }
    /// <summary>
    /// 获取域用户信息
    /// </summary>
    /// <param name="userid"></param>
    /// <returns></returns>
    public DomainUser GetAdUserInfo(string userid)
    {
        DomainUser du = new DomainUser();
        DirectoryEntry de = GetUser(userid);
        if (de != null)
        {
            if (de.Properties["samAccountName"].Value != null)
            {
                du.UserId = de.Properties["samAccountName"].Value.ToString();
            }
            if (de.Properties["displayName"].Value != null)
            {
                du.UserName = de.Properties["displayName"].Value.ToString();
            }
            if (de.Properties["userPrincipalName"].Value != null)
            {
                du.UserPrincipalName = de.Properties["userPrincipalName"].Value.ToString();
            }
            if (de.Properties["telephoneNumber"].Value != null)
            {
                du.Telephone = de.Properties["telephoneNumber"].Value.ToString();
            }
            if (de.Properties["mail"].Value != null)
            {
                du.Email = de.Properties["mail"].Value.ToString();
            }
            if (de.Properties["description"].Value != null)
            {
                du.Description = de.Properties["description"].Value.ToString();
            }
            if (de.Properties["Department"].Value != null)
            {
                du.Department = de.Properties["Department"].Value.ToString();
            }
        }

        return du;       
    }
    /// <summary>
    /// 从域中删除用户
    /// </summary>
    /// <param name="du"></param>
    /// <returns></returns>
    public string DeleteUser(DomainUser du)
    {
        try
        {
            DirectoryEntry de = GetUser(du.UserId);
            if (de != null)
            {
                string path = de.Parent.Path;
                DirectoryEntry parentde = new DirectoryEntry(path, AdUser, AdPwd, AuthenticationTypes.Secure);
                parentde.Children.Remove(de);
                return DomainUser._success;
            }
            else
            {
                return DomainUser._failed;
            }
        }
        catch (Exception ex)
        {
            LogManage.SaveInfo(ex.ToString());
            return DomainUser._failed;
        }
    }