添加一个用户到 active directory users 和group

这里提供一个方法。
public string CreateWindowsAccount(string username,string password,string userDescription,string groupNameToAdd,string machineName)
{
try
{
string directoryFormat = "WinNT://{0},computer";
DirectoryEntry AD = new DirectoryEntry(String.Format(directoryFormat,machineName));

DirectoryEntry newUser = AD.Children.Add(username,"user");
newUser.Invoke("SetPassword",new object[]{password});
newUser.Invoke("Put",new object[]{"Description",userDescription});
newUser.CommitChanges();

if(groupNameToAdd !=null)
{
DirectoryEntry grp = AD.Children.Find(groupNameToAdd, "group");
if (grp != null) {grp.Invoke("Add", new object[] {newUser.Path.ToString()});}
}
newUser.CommitChanges();
return "true";
}
catch(Exception e)
{
return e.Message;
}
}