Using DirectoryEntry Class create a windows user from asp.net2.0 web application .In Win Xp Prof. if i set a administrator privilage to ASPNET user it's allow to create a new windows user but for win 2003 server it's not allow to create a new user by doing same privilage.There is no active directiory in win 2003 server.

Could you please tell me the solution that what set of privilage i have to set for creating the new user from asp.net 2.0 web application.

First things first. If I have understood you correctly, you are trying to create a new user in the Active Directory, right? Then, in order to do this, you need to have an account that has enough privileges in the AD to do this. Administrator is not enough, as it usually means local administrator. And running this with Domain Admin is not an option. So I suggest you either give the person that is indented to do this correct credentials in the AD, and then use integrated security in your web app, or you create a service account in the AD which have permission to create new users. Then you configure your asp web to run with this user's credentials. Something like that :-)

Hi Johram,

very thankful to receiving your answer...but  there is no concept of active directory...inside a active directory it's working fine...only problem when i am facing to create user from work group.Mainly for windows user it's prevent me to create new user. Inside win xp prof.  machine it's working fine,but i am facing problem with win 2003 server.

You are trying to create an AD user from a machine that is not part of the domain? Have I understood you correctly? And this machine is a 2003 server? Weird.

This can be done, but the operation still needs to be carried out within the context of a domain user that has permissions to create an AD user. Being administrator on a machine that is not a member of the domain is not enough.

May I ask why this server is not a member of the domain? Just being curious... Is it maybe located physically outside the domain?

 Hi,

 Again very much thankful.... see this is totally based on requirements of client. In client machine no active directory is created.Only workgroup is there.In ADS this is working finely.Even in windowsXP professional machine if i set administrator privilage for ASPNET user it's working finely & creating the new user.

Only i am facing problem with windows 2003 server.I have given administrator privilage to ASPNET user even i have given same privilage to IIS_WPG group.But still it is showing problem.I am trying to create a group from application it's not happening & even trying to create a user from application this is also not happening.

Is the XP u mention is a part of AD?

Also look at

http://www.dotnet247.com/247reference/msgs/48/240137.aspx

Hi soumitrasa,

Based on my understanding, you want to create local user by ASP.NET application. The web project works great when running on Windows XP, but fails on Windows 2003. If there has been any misunderstanding, please let me know.

In my opinion, the solution of giving privilege to the account for ASP.NET web application should work on both Windows XP and Windows 2003. The most likely cause of this issue is that you assigned privilege to the wrong account. In Windows XP, the IIS version is 5.1 and by default ASP.NET using the ?ASPNET? account. However, in Windows 2003, the IIS version is 6.0, and ASP.NET using the ?Network Service?.

Hence, please try to give privilege to ?Network Service? account, or configure Application Pool identity to run as the Local System account. About how to configure Application Pool identity, please refer to the following link:

Configuring Application Pool Identity in IIS 6.0 (IIS 6.0)
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/12a3d96c-65ea-4210-96ad-86a801f6a88c.mspx?mfr=true