将用户名转换为C＃/ .NET中的SIDstring

有一个关于从SID转换到帐户名称的问题 ; 没有其他的方法。

如何将用户名转换为SIDstring，例如，找出哪个HKEY_USERS子项与给定名称的用户有关？

Answer 1

播客告诉我，我应该问，回答，当他们还没有回答的问题。 开始。

.NET 2.0及以上的简单方法是：

NTAccount f = new NTAccount("username"); SecurityIdentifier s = (SecurityIdentifier) f.Translate(typeof(SecurityIdentifier)); String sidString = s.ToString(); 

困难的方式，它不会工作，并在.NET 1.1上工作：

 [DllImport("advapi32.dll", CharSet=CharSet.Auto, SetLastError=true)] public static extern bool LookupAccountName([In,MarshalAs(UnmanagedType.LPTStr)] string systemName, [In,MarshalAs(UnmanagedType.LPTStr)] string accountName, IntPtr sid, ref int cbSid, StringBuilder referencedDomainName, ref int cbReferencedDomainName, out int use); [DllImport("advapi32.dll", CharSet=CharSet.Auto, SetLastError=true)] internal static extern bool ConvertSidToStringSid(IntPtr sid, [In,Out,MarshalAs(UnmanagedType.LPTStr)] ref string pStringSid); /// <summary>The method converts object name (user, group) into SID string.</summary> /// <param name="name">Object name in form domain\object_name.</param> /// <returns>SID string.</returns> public static string GetSid(string name) { IntPtr _sid = IntPtr.Zero; //pointer to binary form of SID string. int _sidLength = 0; //size of SID buffer. int _domainLength = 0; //size of domain name buffer. int _use; //type of object. StringBuilder _domain = new StringBuilder(); //stringBuilder for domain name. int _error = 0; string _sidString = ""; //first call of the function only returns the sizes of buffers (SDI, domain name) LookupAccountName(null, name, _sid, ref _sidLength, _domain, ref _domainLength, out _use); _error = Marshal.GetLastWin32Error(); if (_error != 122) //error 122 (The data area passed to a system call is too small) - normal behaviour. { throw (new Exception(new Win32Exception(_error).Message)); } else { _domain = new StringBuilder(_domainLength); //allocates memory for domain name _sid = Marshal.AllocHGlobal(_sidLength); //allocates memory for SID bool _rc = LookupAccountName(null, name, _sid, ref _sidLength, _domain, ref _domainLength, out _use); if (_rc == false) { _error = Marshal.GetLastWin32Error(); Marshal.FreeHGlobal(_sid); throw (new Exception(new Win32Exception(_error).Message)); } else { // converts binary SID into string _rc = ConvertSidToStringSid(_sid, ref _sidString); if (_rc == false) { _error = Marshal.GetLastWin32Error(); Marshal.FreeHGlobal(_sid); throw (new Exception(new Win32Exception(_error).Message)); } else { Marshal.FreeHGlobal(_sid); return _sidString; } } } } 

Answer 2

LookupAccountName()本地方法的优点是可以在远程机器上执行，而.NET方法不能远程执行。

虽然该示例没有显示它LookupAccountName(null) < – 这是要执行的远程系统。