I have a need to be able to have a VFP app add users and local groups to an NT domain. The app runs in an administrative context so there's no rights issue. I can run (very) basic commands like:

RUN NET USER username password /ADD

from a VFP application, but this gives me very little control (such as to know if the command failed). I was wondering if there are any standard API calls that could do the following:

- check if a user name already exists (so I don't try to add one with same name)

- add a user account (with some return value indicating success/failure)

- check if a user is a memeber of a local group

- add a user to an existing local group

- (extra credit) figure out if a specified user has rights to a specified resource (like a file)

If this stuff is possible and you have a good reference, I would be most appreciative.

TIA,

-- Randy