Freigeben über

Add users of an AD Group to the SharePoint Site

  • Artikel

Recently, I had a requirement from my Customer which required to add an AD groups’s user to the SharePoint site. As you know, if you try to add the SharePoint group directly to the SharePoint site, it would simply create the group but wouldn’t add the users. So you need to explicitly add users to the site. Customer wanted me to provide some utility that could automate this process.

The key to this solution involves Querying the AD group to get the users that belong to the AD group and then adding these users to the SharePoint Site. To ge the list of the users from AD, Asp.Net provides the namespace - System.DirectoryServices. The namespace exposes a number of classes that allow you to query the AD. BElow is the sample code to get a list of users from AD:

    1: public static List<UserInfo> PopulateUserInfoFromADGroup(string GroupId)

    2:         {

    3:             //PLease set the GC or LDAP server name

    4:             string domain = "GC://corp.emailserver.com";

    5:             System.DirectoryServices.DirectoryEntry entry = new DirectoryEntry(domain);

    6:  

    7:             DirectorySearcher adSearcher = new DirectorySearcher(entry);

    8:             adSearcher.SearchScope = SearchScope.Subtree;

    9:  

   10:             // Please remember to have change the below string

   11:             // OU=Distribution Lists,DC=domain,DC=corp,DC=microsoft,DC=com

   12:             // The string was for our domain so you need to change the domain string to your domain string

   13:             //It mostly is of the format abc.abc.abc.com so have four DC variables with value as 

   14:             // DC=abc,DC=abc,DC=abc,DC=com

   15:             adSearcher.Filter = "(&(objectClass=user)(memberOf=CN=" + GroupId + ",OU=Distribution Lists,DC=domain,DC=corp,DC=microsoft,DC=com))";

   16:             SearchResultCollection oResult = adSearcher.FindAll();

   17:  

   18:             List<UserInfo> userList = new List<UserInfo>();

   19:  

   20:             if (oResult != null)

   21:             {

   22:                 foreach (SearchResult result in oResult)

   23:                 {

   24:                     UserInfo user = new UserInfo();

   25:                     ResultPropertyValueCollection propColl = result.Properties["sAMAccountName"];

   26:                     ResultPropertyValueCollection propCollName = result.Properties["displayname"];

   27:                     ResultPropertyValueCollection propCollMail = result.Properties["mail"];

   28:                     ResultPropertyValueCollection propCollDomain = result.Properties["msds-SourceObjectdn"];

   29:                     for (int i = 0; i < propColl.Count; i++)

   30:                     {

   31:                         user.UserEmail = propCollMail[i].ToString();

   32:                         user.userLoginName = propColl[i].ToString();

   33:                         user.USerName = propCollName[i].ToString();

   34:  

   35:                         //Get the Domain Name

   36:                         string DomainName = propCollDomain[i].ToString();

   37:                         Char comma = ',';

   38:                         string[] test = DomainName.Split(comma);

   39:                         user.DomainName = test[2].Remove(0, 3);

   40:                         userList.Add(user);

   41:                     }

   42:                 }

   43:             }

   44:  

   45:             return userList;

   46:         }

 

After you have got the list of users from AD, you can simply add the Users to the SharePoint site.

    1: static void Main(string[] args)

    2:         {

    3:             string strSiteCollectionUrl, strADGroupName;

    4:  

    5:             Console.WriteLine("Enter Site Collection Url: (Press Enter after entering the url)");

    6:             strSiteCollectionUrl = Console.ReadLine();

    7:  

    8:  

    9:             Console.WriteLine("Enter Friendly AD Group Name: (Press Enter after entering the Name)");

   10:             strADGroupName = Console.ReadLine();

   11:  

   12:             List<UserInfo> userList = new List<UserInfo>();

   13:             userList = PopulateUserInfoFromADGroup(strADGroupName);

   14:  

   15:             SPSite site = new SPSite(strSiteCollectionUrl);

   16:             SPWeb web = site.OpenWeb();

   17:  

   18:             SPGroup AddUserGroup;

   19:             //Check if Group Exists

   20:             

   21:             

   22:             foreach (UserInfo user in userList)

   23:             {

   24:                 SPRoleDefinitionCollection roleDefinitions = web.RoleDefinitions;

   25:                 SPRoleAssignmentCollection roleAssignments = web.RoleAssignments;

   26:                 SPRoleAssignment roleAssignment = new SPRoleAssignment(user.DomainName + "\\" + user.userLoginName, user.UserEmail, user.USerName, "");

   27:                 SPRoleDefinitionBindingCollection roleDefBindings = roleAssignment.RoleDefinitionBindings;

   28:                 roleDefBindings.Add(roleDefinitions.GetByType(SPRoleType.Contributor));

   29:                 roleAssignments.Add(roleAssignment);

   30:                 SPUser newUser = web.SiteUsers[user.DomainName + "\\" + user.userLoginName];

   31:                 try

   32:                 {

   33:                     AddUserGroup = web.SiteGroups[strADGroupName];

   34:                 }

   35:                 catch

   36:                 {

   37:                     web.SiteGroups.Add(strADGroupName,newUser,newUser,"");

   38:                 }

   39:                 AddUserGroup = web.SiteGroups[strADGroupName];

   40:                 AddUserGroup.AddUser(user.DomainName + "\\" + user.userLoginName, user.UserEmail, user.USerName, "");

   41:             }

   42:             

   43:         }    

   44:  

   45: /// <summary>

   46:     /// Class with User details

   47:     /// </summary>

   48:     public class UserInfo

   49:     {

   50:         private string _userLoginName;

   51:  

   52:         public string userLoginName

   53:         {

   54:             get { return _userLoginName; }

   55:             set { _userLoginName = value; }

   56:         }

   57:  

   58:         private string _userName;

   59:  

   60:         public string USerName

   61:         {

   62:             get { return _userName; }

   63:             set { _userName = value; }

   64:         }

   65:  

   66:         private string _userEmail;

   67:  

   68:         public string UserEmail

   69:         {

   70:             get { return _userEmail; }

   71:             set { _userEmail = value; }

   72:         }

   73:  

   74:         private string _domainName;

   75:  

   76:         public string DomainName

   77:         {

   78:             get { return _domainName; }

   79:             set { _domainName = value; }

   80:         }

   81:     

   82:     

   83:  

   84:     }

Comments