Welcome To The Home Of The Visual FoxPro Experts  
home. signup. forum. archives. search. google. articles. downloads. faq. members. weblogs. file info. rss.
 From: Pete Sass
  Where is Pete Sass?
 Marathon, Ontario
 Canada
 Pete Sass
 To: DEREK DODOO
  Where is DEREK DODOO?
 READING, UK
 United Kingdom
 DEREK DODOO
 Tags
Subject: RE: apply active directory to a menu system
Thread ID: 393609 Message ID: 393681 # Views: 50 # Ratings: 0
Version: Visual FoxPro 6 Category: Active Directory
Date: Saturday, December 21, 2013 3:04:58 PM         
   


> >
> >
> > Hi,
> >
> > First off the first line of code: lcDomainName = "PETEATHOME"
> > This has to be the domain name of your active directory or if running on
> > a Windows 7-8 machine this has to be the actual computer name.
> >
> > I run the code on my 4 workstations and 2 servers and I can poll the information
> > as expected.
> >
> >
> > Pete "the IceMan", from the Great White North of Canada.
> > www.marathongriffincomputers.com
>
> How do you synchronize the active directory to the application or how do incorporate the access rights and levels
> in the vfp6 application to the active directory.
>
> Please I'm new to the active directory , reading on it.
>
> Please provide an exhaustive example which explains this request.


Hi,

I cannot provide you an exhaustive example as at this point you have not told us what you want to do
with your VFP menus as it relates to active directory.

Maybe this simplistic explanation will help you.
Think of active directory no different than a centralized database holding information on:
- Users that login and what they should have permission and access into.
- The access into could be application or could be folders and or files residing inside an active directory
network.
- in very simple and basic terms this is generally setup in AD by creating user groups and putting user
login accounts "their Login ID information inside of an AD group.
- You allow or deny network recourses to the groups via AD configuration settings.
- Thus a group that is allowed access to a folder location or an application means generally no other users
unless those belonging to this group can have access to the folder or application, etc.
- AD works on the principal that denial takes precedent. So this means generally in a stock AD installation
things are totally locked down and you work on allowing users access to resources rather than everyone has
access to everything and you do around denying access permissions.

So in your question if someone wanted to create a VFP application that as an example could only be run
by me and you in a 350 user based AD network, I would do the following.
Let's say my VFP application is called "AutoShop POS"
I could create an AD group called "AutoShop" and make your login account and my login account members of
the "AutoShop" group.
Running of this application is denied unless you are a member of the "AutoShop" group.
Once this is setup, only you and I have access to run the "AutoShop" application.

Now here you need to understand that in an AD domain a workstation when initially installed by the IT
person, he/she during the installation joins the AD domain. Now this computer is also a member of the
AD much like a user is, but not exactly in the same way - lol

Now you have all the users and computers and by the way other servers in AD and all are now AD objects.
So you can now set allow / deny permissions at a group level and machine level. This provides for very
granular permission configurations.

Now the user logins into the domain on their workstation and thus now authenticates to one of the
domain controllers, generally there are two kept in sync via a scheduled replication process.
So once this is done, event if the application is being run locally on a workstation, AD has ties
now directly into all the permissions on this workstation and even a locally running app can be
denied via AD security policies.

So generally this is the kind of thing you could do in an AD domain.
Now you mention VFP menus?

Now that you have a brief explanation of AD I ask you again:
What do you want to end up with in the end?
If you do not know, ask your client? What do they want to achieve in the end with the application
and how it relates to Active Directory?

Pete "the IceMan", from the Great White North of Canada.
www.marathongriffincomputers.com

ENTIRE THREAD

apply active directory to a menu system Posted by DEREK DODOO @ 12/20/2013 4:00:04 PM
RE: apply active directory to a menu system Posted by Koen Piller @ 12/20/2013 4:12:52 PM
RE: apply active directory to a menu system Posted by Pete Sass @ 12/20/2013 7:04:25 PM
RE: apply active directory to a menu system Posted by DEREK DODOO @ 12/20/2013 7:26:19 PM
RE: apply active directory to a menu system Posted by David Mustakim @ 12/20/2013 8:15:32 PM
RE: apply active directory to a menu system Posted by Pete Sass @ 12/20/2013 11:31:54 PM
RE: apply active directory to a menu system Posted by DEREK DODOO @ 12/21/2013 10:50:20 AM
RE: apply active directory to a menu system Posted by Pete Sass @ 12/21/2013 3:04:58 PM
RE: apply active directory to a menu system Posted by David Mustakim @ 12/22/2013 12:03:21 AM
RE: apply active directory to a menu system Posted by Anders Altberg @ 12/21/2013 12:42:10 AM
RE: apply active directory to a menu system Posted by Koen Piller @ 12/21/2013 9:47:22 AM
RE: apply active directory to a menu system Posted by DEREK DODOO @ 12/21/2013 10:34:03 AM
RE: apply active directory to a menu system Posted by Koen Piller @ 12/21/2013 4:06:02 PM
RE: apply active directory to a menu system Posted by David Mustakim @ 12/22/2013 12:00:56 AM
RE: apply active directory to a menu system Posted by Koen Piller @ 12/22/2013 11:37:50 PM
RE: apply active directory to a menu system Posted by David Mustakim @ 12/23/2013 12:07:17 AM
RE: apply active directory to a menu system Posted by Jun Tangunan @ 12/23/2013 12:47:08 AM
RE: apply active directory to a menu system Posted by David Mustakim @ 12/23/2013 1:06:19 AM
RE: apply active directory to a menu system Posted by Jun Tangunan @ 12/23/2013 1:21:25 AM
RE: apply active directory to a menu system Posted by David Mustakim @ 12/23/2013 2:46:15 AM
RE: apply active directory to a menu system Posted by Jun Tangunan @ 12/23/2013 5:18:30 AM
RE: apply active directory to a menu system Posted by David Mustakim @ 12/23/2013 5:41:04 AM
RE: apply active directory to a menu system Posted by Jun Tangunan @ 12/23/2013 6:56:01 AM
RE: apply active directory to a menu system Posted by David Mustakim @ 12/23/2013 3:02:13 PM
RE: apply active directory to a menu system Posted by DEREK DODOO @ 12/26/2013 9:44:56 PM
RE: apply active directory to a menu system Posted by DEREK DODOO @ 12/26/2013 9:46:27 PM
RE: apply active directory to a menu system Posted by Jun Tangunan @ 12/26/2013 11:31:55 PM
RE: apply active directory to a menu system Posted by David Mustakim @ 12/27/2013 3:05:57 AM