Active Directory, 3rd Edition

Creating a Group

Now we will move on to creating groups . Creating a group is very similar to creating a user. You use the same IADsContainer::Create method:

    Set objGroup = objSalesOU.Create("group", "cn=Managers")
    objGroup.Put "sAMAccountName", "Managers"
    objGroup.SetInfo

This code assumes we already have a pointer to an OU in the objSalesOU variable. The IADs::Put method is used to set the sAMAccountName, a mandatory attribute in Windows 2000 AD with no default value, just like with users.

The IADsGroup interface that operates on group objects supports four methods and one property that is specific to the group object, as listed in Table 23-4.

Table 23-4. The IADsGroup interface

IADsGroup methods and properties	Action
Add	Adds users to the group as members
Remove	Removes user members from the group
IsMember	Tests to see if a user is a member of a group
Members	Returns a list of all the members of the group
Description	Returns the text describing the group

In Example 23-7, we show how to create a group with both the WinNT and LDAP providers.

Example 23-7. Creating a group with both the WinNT and LDAP providers

Option Explicit Dim objDomain, objGroup, objComputer 'Creating a group in a Windows NT domain Set objDomain = GetObject("WinNT://MYDOMAIN") Set objGroup = objDomain.Create("group","MyGroup") ObjGroup.SetInfo 'Creating a local group on a computer or member server 'Valid for Windows NT, Windows 2000 and Windows Server 2003 Set objComputer = GetObject("WinNT://MYCOMPUTER") ...