Creating a Group
Now we will move on to creating
groups
. Creating a group is very similar to creating a user. You use the same IADsContainer::Create method:
Set objGroup = objSalesOU.Create("group", "cn=Managers")
objGroup.Put "sAMAccountName", "Managers"
objGroup.SetInfoThis code assumes we already have a pointer to an OU in the objSalesOU variable. The IADs::Put method is used to set the sAMAccountName, a mandatory attribute in Windows 2000 AD with no default value, just like with users.
The IADsGroup interface that operates on group objects supports four methods and one property that is specific to the group object, as listed in Table 23-4.
Table 23-4. The IADsGroup interface
|
IADsGroup methods and properties |
Action |
|---|---|
|
Add |
Adds users to the group as members |
|
Remove |
Removes user members from the group |
|
IsMember |
Tests to see if a user is a member of a group |
|
Members |
Returns a list of all the members of the group |
|
Description |
Returns the text describing the group |
In Example 23-7, we show how to create a group with both the WinNT and LDAP providers.
Example 23-7. Creating a group with both the WinNT and LDAP providers
Option Explicit Dim objDomain, objGroup, objComputer 'Creating a group in a Windows NT domain Set objDomain = GetObject("WinNT://MYDOMAIN") Set objGroup = objDomain.Create("group","MyGroup") ObjGroup.SetInfo 'Creating a local group on a computer or member server 'Valid for Windows NT, Windows 2000 and Windows Server 2003 Set objComputer = GetObject("WinNT://MYCOMPUTER") ...