Ms-active-directory

Added functionality to support joining an AD domain by taking over a pre-existing/pre-created computer account.

This can allow the permissions granted to the credentials used to join the domain to be greatly restricted.
Instead of general "create computers in this location" permissions, now joining is possible by just having permission to RESET PASSWORD on a single computer (or CHANGE PASSWORD if the current computer password is provided). This supports environments where the team joining machines to the domain is never supposed to create computers themselves, and just takes over ones provided by another team, and that other team sets up the services and hostnames and encryption types.

Added functionality for the following:

1. Find users, groups, and objects by SID
2. Tools for parsing and managing security descriptors
3. Find security descriptor for user, group, or object
4. Set security descriptor for user, group, or object
5. Add permissions to security descriptor for user, group, or object
6. Basic account management functions, such as reset password, change password, and unlock account
7. Support for specifying LDAP controls when performing find operations
8. Auto-pagination - where a page size can be set and potentially large queries will be paginated to allow for better use in multi-threaded applications

Fixed a bug related to looking up kerberos and LDAP servers in DNS

It includes 1 user-requested enhancement, and new user/group management functionality.

The user-requested enhancement is de-duplication of SRV records for ldap/kerberos servers that have the same hostname and port. These duplicate SRV records can get created due to a bug in AD when upgrading from older versions to 2016/2019, and is recognized as a bug by microsoft. Just in case domain admins don't remove the duplicate records, the library now removes them to improve efficiency and functionality.

There's features for looking up users and groups in a variety of ways and getting attributes about them, looking up the groups that users belong to or the groups that groups belong to, and adding/removing users and groups to/from other groups.

Version 1.0.0 is here, with good functionality.