Using Active Directory Domain Services

This section provides guidelines for writing applications that use or publish data in an Active Directory directory service.

Active Directory Domain Services are compliant with Lightweight Directory Access Protocol 3.0, which is defined by RFC 2251 and other RFCs. Any of the following API sets can be used to access Active Directory Domain Services. Each API set has advantages and disadvantages that depend on the programming language, programming environment, and intended method of execution. The majority of the examples in this guide use ADSI, which is supported by languages such as C and C++, as well as automation-compliant languages such as Microsoft Visual Basic and Visual Basic Scripting Edition.

For more information about specific Active Directory Domain Services technologies, see:

• Lightweight Directory Access Protocol
• Active Directory Service Interfaces
• System.DirectoryServices

This section discusses the following topics:

• Binding to Active Directory Domain Services
• Searching in Active Directory Domain Services
• Creating and Deleting Objects in Active Directory Domain Services
• Moving Objects
• Reading and Writing Attributes of Objects in Active Directory Domain Services
• Controlling Access to Objects in Active Directory Domain Services
• Extending the Schema
• Extending the User Interface for Directory Objects
• Managing Users
• Managing Groups
• Tracking Changes
• Service Publication
• Service Logon Accounts
• Mutual Authentication Using Kerberos
• Backing Up and Restoring Active Directory
• Storing Dynamic Data
• Application Directory Partitions
• Detecting the Operation Mode of a Domain

Send comments about this topic to Microsoft

Build date: 10/26/2012