SPWeb.Groups vs. SPWeb.SiteGroups [Tyler Holmes]

private enum GroupType
{
	Owners,
	Members,
	Visitors
}

public SPWeb CurrentWeb
{
	get { return SPContext.GetContext(HttpContext.Current).Web; }
}

private void CreateAndPopulateGroup(string groupName, GroupType groupType, bool createNewGroup)
{
	// Create the group
	if (createNewGroup)
	{
		SPMember owner = SPContext.GetContext(HttpContext.Current).Web.CurrentUser;
		this.CurrentWeb.SiteGroups.Add(groupName, owner, null, groupName);
		SPGroup grp = this.CurrentWeb.SiteGroups[groupName];
		switch (groupType)
		{
			case GroupType.Owners:
				this.CurrentWeb.AssociatedOwnerGroup = grp;
				break;
                    	case GroupType.Members:
				this.CurrentWeb.AssociatedMemberGroup = grp;
				break;
			case GroupType.Visitors:
				this.CurrentWeb.AssociatedVisitorGroup = grp;
				break;
		}
		SPRoleDefinitionCollection roleDef = this.CurrentWeb.RoleDefinitions;
		SPRoleAssignmentCollection roleAssigns = this.CurrentWeb.RoleAssignments;
		SPRoleAssignment roleAssign = new SPRoleAssignment(grp);
		SPRoleDefinitionBindingCollection definitions = roleAssign.RoleDefinitionBindings;
		switch (groupType)
		{
			case GroupType.Owners:
				definitions.Add(roleDef["Full Control"]); //Could be Contribute or Read
				break;
			case GroupType.Members:
				definitions.Add(roleDef["Contribute"]);
				break;
			case GroupType.Visitors:
				definitions.Add(roleDef["Read"]);
			break;
		}
		roleAssigns.Add(roleAssign);
		this.CurrentWeb.Update();
	}
	else // use an existing group
	{
		string grpName = string.Empty;
		// find the group reference
		foreach (SPGroup group in this.CurrentWeb.SiteGroups)
		{
			switch (groupType)
			{
				case GroupType.Owners:
					if (group.ID.ToString() == this.ddlOwnerGroup.SelectedValue)
					{
						grpName = group.Name;
					}
					break;
				case GroupType.Members:
					if (group.ID.ToString() == this.ddlMemberGroup.SelectedValue)
					{
						grpName = group.Name;
					}
					break;
				case GroupType.Visitors:
					if (group.ID.ToString() == this.ddlVisitorGroup.SelectedValue)
					{
						grpName = group.Name;
					}
					break;
			}
		}
		SPGroup grp = this.CurrentWeb.SiteGroups[grpName];
		switch (groupType)
		{
			case GroupType.Owners:
				this.CurrentWeb.AssociatedOwnerGroup = grp;
				break;
			case GroupType.Members:
				this.CurrentWeb.AssociatedMemberGroup = grp;
				break;
			case GroupType.Visitors:
				this.CurrentWeb.AssociatedVisitorGroup = grp;
				break;
		}

		SPRoleDefinitionCollection roleDef = this.CurrentWeb.RoleDefinitions;
		SPRoleAssignmentCollection roleAssigns = this.CurrentWeb.RoleAssignments;
		SPRoleAssignment roleAssign = new SPRoleAssignment(grp);
		SPRoleDefinitionBindingCollection definitions = roleAssign.RoleDefinitionBindings;
		switch (groupType)
		{
			case GroupType.Owners:
				definitions.Add(roleDef["Full Control"]); //Could be Contribute or Read
				break;
			case GroupType.Members:
				definitions.Add(roleDef["Contribute"]);
				break;
			case GroupType.Visitors:
				definitions.Add(roleDef["Read"]);
				break;
		}
		roleAssigns.Add(roleAssign);
		this.CurrentWeb.Update();
	}

	SPUserCollection grpUsers = this.CurrentWeb.SiteGroups[groupName].Users;

	// Add the users to the group;
	System.Collections.ArrayList entities = new System.Collections.ArrayList();

	switch (groupType)
	{
		case GroupType.Owners:
			entities = pickerOwnerGroupMembers.Entities;
			break;
		case GroupType.Members:
			entities = pickerMemberGroupMembers.Entities;
			break;
		case GroupType.Visitors:
			entities = pickerVisitorGroupMembers.Entities;
			break;
	}

	foreach (PickerEntity entity in entities)
	{
		// add the user only if they do not exist already
		try
		{
			SPUser user = grpUsers[entity.Key];
		}
		catch (SPException exc)
		{
			// user was not found, continue to add the user
			this.CurrentWeb.SiteGroups[groupName].Users.Add(entity.Key,
			Convert.ToString(entity.EntityData["Email"]),
			Convert.ToString(entity.EntityData["DisplayName"]),
			string.Empty);
		}
	}
}

SPContext.GetContext(HttpContext.Current).Web.AllUsers.Add("domain\\Group", "", "", "domain\\Group" );

To add your group to an existing site role (Full Control, Contribute, Read, etc.), use the following:

SPWeb cWeb = SPContext.GetContext(HttpContext.Current).Web;
SPUser user = cWeb .AllUsers["domain\\Group"];
SPGroup grouptoadd = cWeb .Groups["Full Control"];
grouptoadd.AddUser(user);

SPWeb newWeb;

newWeb = SPContext.GetContext(HttpContext.Current).Web.Webs.Add(strURL, //URL ("foo" would generate example.com/foo)
	strTitle, //Title
	strDescription, //Description
	(uint)1033, // English
	strTemplate, // Template type
	bUseUnique, // Use unique permissions?
	false); // Convert existing web?

newWeb.Navigation.UseShared = (someCondition) ? true : false;

newWeb.Update();

if (newWeb.Navigation.UseShared)
{
	Microsoft.SharePoint.Navigation.SPNavigationNode pNode = new Microsoft.SharePoint.Navigation.SPNavigationNode(newWeb.ParentWeb.Title, newWeb.ParentWeb.Url.Replace(newWeb.ParentWeb.Site.Url, string.Empty));
	Microsoft.SharePoint.Navigation.SPNavigationNode cNode = new Microsoft.SharePoint.Navigation.SPNavigationNode(newWeb.Title, strURL);
	newWeb.ParentWeb.Navigation.TopNavigationBar.AddAsLast(cNode);

	// add to quick launch
	Microsoft.SharePoint.Navigation.SPNavigationNodeCollection quickLaunch = newWeb.ParentWeb.Navigation.QuickLaunch;
	foreach (Microsoft.SharePoint.Navigation.SPNavigationNode node in quickLaunch)
	{
		if (node.Title == "Sites")
		{
			node.Children.AddAsLast(cNode);
			break;
		}
	}
}

newWeb.Dispose();

It is always important to realize the impact such changes can have, as there are times when it will be necessary to contact Microsoft for aid with your SharePoint environment.

Note: The default character limit attribute is set to 250 characters.

Note:  It is important to remove these orphaned servers as SharePoint will attempt to deploy sites (if configured as a Web Application Server) and other packages (such as contents of a solution package) to the orphaned server and permanently error out making the administration of your farm more difficult as you continue to add functionality.

When you attempt to remove the orphaned server, you will receive an error similar to the following:

Remove failed: An object in the SharePoint administrative framework depends on other objects which do not exist. Ensure that all of the objects dependencies are created and retry this operation.

(Remove failed: Operation aborted (Exception from HRESULT: 0×80000007):

The conflict occurred in database “SharePoint_Config”, table “dbo.Objects”, column ‘ParentId’. An object in the SharePoint administrative framework depends on other objects which do not exist.

This error is usually due to an orphaned reference to the Single Sign-On Service.  To fix this problem, you can do the following:

Note: This requires manual editing of the SharePoint configuration database.  Any manual changes made to this database that result in an error will NOT be supported by Microsoft.

select * from objects where Name like '%<SERVER NAME>%'

Use the output of that statement to obtain the ID (GUID) of the orphaned server.

select * from dependencies where objectid = '<GUID>'

The row returned will allow you to see the relationship (Object –> Dependency) that is preventing the removal of the orphaned server. It is most likely that if you look up the Dependent ID in the Objects table, you will see that it is a reference to the “SSOSRV” service (Single Sign-On Service).

After making sure you have found the correct entry, delete the item from the Dependencies table.

delete from dependencies where objectid = '<GUID>'

At this point, you will be able to remove your orphaned server from your farm (no IISRESET required).

using System;
using System.Data;
using System.DirectoryServices;
using System.Configuration;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;

namespace MyLifeInAMinute.Base.Utiltities
{
    public class ActiveDirectoryHelper
    {
        /// <summary>
        /// returns a string (i.e. LDAP://example.dc.local
        /// </summary>
        private string LDAPConnection
        {
            get { return System.Configuration.ConfigurationManager.AppSettings["LDAPConnection"].ToString(); }
        }

        /// <summary>
        /// returns a string contain the username for the LDAP connection (preferably admin level so we
        /// can reset passwords)
        /// </summary>
        private string LDAPAdminPassword
        {
            get { return System.Configuration.ConfigurationManager.AppSettings["LDAPAdminPass"].ToString(); }
        }

        /// <summary>
        /// returns a string containing the password for the LDAP connection
        /// </summary>
        private string LDAPAdminUserName
        {
            get { return System.Configuration.ConfigurationManager.AppSettings["LDAPAdmin"].ToString(); }
        }

        private DirectoryEntry GetDirectoryObject()
        {
            DirectoryEntry oDE;
            oDE = new DirectoryEntry(this.LDAPConnection, this.LDAPAdminUserName, this.LDAPAdminPassword, AuthenticationTypes.Secure);
            return oDE;
        }

        public SearchResultCollection GetAllUsers()
        {
            DirectoryEntry de = GetDirectoryObject();
            DirectorySearcher deSearch = new DirectorySearcher();
            deSearch.SearchRoot = de;

            deSearch.Filter = "(&(objectClass=user))";
            deSearch.SearchScope = SearchScope.Subtree;
            SearchResultCollection results = deSearch.FindAll();

            return results;
        }

        public DirectoryEntry GetUser(string propertyName, string propertyValue)
        {
            DirectoryEntry de = GetDirectoryObject();
            DirectorySearcher deSearch = new DirectorySearcher();
            deSearch.SearchRoot = de;

            deSearch.Filter = "(&(objectClass=user)(" + propertyName + "=" + propertyValue + "))";
            deSearch.SearchScope = SearchScope.Subtree;
            SearchResult results = deSearch.FindOne();

            if (!(results == null))
            {
                de = new DirectoryEntry(results.Path, this.LDAPAdminUserName, this.LDAPAdminPassword, AuthenticationTypes.Secure);
                return de;
            }
            else
            {
                return null;
            }
        }

        public void SetProperty(DirectoryEntry de, string PropertyName, string PropertyValue)
        {
            if (PropertyValue != null)
            {
                if (de.Properties.Contains(PropertyName))
                {
                    de.Properties[PropertyName][0] = PropertyValue;
                }
                else
                {
                    de.Properties[PropertyName].Add(PropertyValue);
                }
            }
        }

        public void ChangePassword(string userPath, string userName, string userCurrentPwd, string userNewPwd)
        {
            DirectoryEntry oDE;
            oDE = new DirectoryEntry(userPath, userName, userCurrentPwd, AuthenticationTypes.Secure);

            try
            {
                // Change the password.
                oDE.Invoke("ChangePassword", new object[] { userCurrentPwd, userNewPwd });
                oDE.CommitChanges();
                oDE.Close();
            }
            catch (Exception excep)
            {
                throw new Exception("Error changing password. Reason: " + excep.InnerException);
            }
        }

        public void SetPassword(string userPath, string userPassword)
        {
            DirectoryEntry usr = new DirectoryEntry();
            usr.Path = userPath;
            usr.AuthenticationType = AuthenticationTypes.Secure;
            object[] password = new object[] { userPassword };
            object ret = usr.Invoke("SetPassword", password);
            usr.CommitChanges();
            usr.Close();
        }

        public string ToADDateString(DateTime date)
        {
            string year = date.Year.ToString();
            int month = date.Month;
            int day = date.Day;
            System.Text.StringBuilder sb = new System.Text.StringBuilder();
            sb.Append(year);
            if (month < 10)
            {
                sb.Append("0");
            }
            sb.Append(month.ToString());
            if (day < 10)
            {
                sb.Append("0");
            }
            sb.Append(day.ToString());
            sb.Append("000000.0Z");
            return sb.ToString();
        }
    }
}

Here are a few examples:

Changing a Password

Utiltities.ActiveDirectoryHelper adHelper = new Utiltities.ActiveDirectoryHelper();

System.DirectoryServices.DirectoryEntry de = new System.DirectoryServices.DirectoryEntry();

if (txtuName.Text.Contains("@"))
	de = adHelper.GetUser("userPrincipalName", txtuName.Text);
else
	de = adHelper.GetUser("sAMAccountName", txtuName.Text);

if (de != null)
	adHelper.ChangePassword(de.Path, txtuName.Text, txtCurrentPwd.Text, txtNewPwd.Text);

Finding a User Property (in this case, sAMAccountName)

Utiltities.ActiveDirectoryHelper adHelper = new JonesDay.JDAuthorization.Utiltities.ActiveDirectoryHelper();

System.DirectoryServices.DirectoryEntry de = new System.DirectoryServices.DirectoryEntry();

if (txtuName.Text.Contains("@"))
	de = adHelper.GetUser("userPrincipalName", txtResetuName.Text);
else
	de = adHelper.GetUser("sAMAccountName", txtResetuName.Text);

string userName = string.Empty;

foreach (object value in de.Properties["sAMAccountName"])
{
	userName = Convert.ToString(value);
}