从ActiveDirectory检索用户帐户过期

我正在尝试从帐户中检索到期日期。

我试过了

DirectoryEntry user = new DirectoryEntry(iMem); var AccountExpiration = DateTime.FromFileTime((int)user.Properties["accountExpires"].Value); 

它不起作用，只给我错误“指定的演员表无效”。

我用的时候

 var AccountExpiration = user.Properties["accountExpires"]; 

返回一个我无法读取的com对象。

使用windows powershell，工作正常，我不明白为什么这不会工作…

这是我在powershell中使用的代码

 $Expires = [datetime]::FromFileTime($tmpUser.accountExpires) 

Answer 1

您可以使用System.DirectoryServices.AccountManagement命名空间来完成此任务。 从PrincipalContext获取UserPrincipal后，您可以检查UserPrincipal.AccountExpirationDate属性。

 PrincipalContext context = new PrincipalContext(ContextType.Domain); UserPrincipal p = UserPrincipal.FindByIdentity(context, "Domain\\User Name"); if (p.AccountExpirationDate.HasValue) { DateTime expiration = p.AccountExpirationDate.Value.ToLocalTime(); } 

如果您确实要使用DirectoryEntry ，请执行以下操作：

 //assume 'user' is DirectoryEntry representing user to check DateTime expires = DateTime.FromFileTime(GetInt64(user, "accountExpires")); private Int64 GetInt64(DirectoryEntry entry, string attr) { //we will use the marshaling behavior of the searcher DirectorySearcher ds = new DirectorySearcher( entry, String.Format("({0}=*)", attr), new string[] { attr }, SearchScope.Base ); SearchResult sr = ds.FindOne(); if (sr != null) { if (sr.Properties.Contains(attr)) { return (Int64)sr.Properties[attr][0]; } } return -1; } 

解析accountExpires值的另一种方法是使用reflection：

 private static long ConvertLargeIntegerToLong(object largeInteger) { Type type = largeInteger.GetType(); int highPart = (int)type.InvokeMember("HighPart", BindingFlags.GetProperty, null, largeInteger, null); int lowPart = (int)type.InvokeMember("LowPart", BindingFlags.GetProperty | BindingFlags.Public, null, largeInteger, null); return (long)highPart <<32 | (uint)lowPart; } object accountExpires = DirectoryEntryHelper.GetAdObjectProperty(directoryEntry, "accountExpires"); var asLong = ConvertLargeIntegerToLong(accountExpires); if (asLong == long.MaxValue || asLong <= 0 || DateTime.MaxValue.ToFileTime() <= asLong) { return DateTime.MaxValue; } else { return DateTime.FromFileTimeUtc(asLong); }