Windows Login Form Authentication with Active Directory

I have created a couple of applications using AD Authentication and then create a encrypted cookie with logon credentials. I would show you the code, but I am using it in a number of organizations and don't want to show the source code.

Look in the System.DirectoryServices namespace.

The way I did it, was I made a class that handles all the tasks of getting user information from AD and processing the login. It then passes this information to another class that handles assigning the cookie etc...

Basically what you need to do, is when they supply username/password you need to use DirectorySearcher to find the object in ad that matches their username, if not found, i display an error. If the searcher did find the username, then I bind to that object getting its information and check the supplied password against the ad objects password property. If all goes well, I send the username over to the other class to assign the cookie and finish the login.

Eventually I made a Server Control that has a generic login form and processing routines behind the scenes. This way I could re-use the control on as many asp.net websites as I needed.

Hope that helps you! Trial and error makes a good programmer :)