I have some code in asp.net ( kindly given by someone else ) to query AD to get user name and email etc.

using System.DirectoryServices;
using System.DirectoryServices.ActiveDirectory;
using ActiveDs;

        DirectorySearcher search = new DirectorySearcher(new DirectoryEntry(), string.Format("(samaccountname={0})", id));
        if (search == null)
            return id;
        if (search.FindOne() == null)
            return id;
        DirectoryEntry usr = search.FindOne().GetDirectoryEntry();
        IADsUser oUsr = (IADsUser)usr.NativeObject;
        return string.Format("{0} {1}", usr.Properties["givenname"].Value, usr.Properties["sn"].Value);

However this requires impersonation with an id that's required to be changed every 2 weeks and then updated in the web.config which is often forgotten

Is there any non impersonation code to achieve the same result ?

UPDATE - it's a config tool and it looks up name, email id etc. I like the service a/c idea

Q - How is it possible to run ( impersonate ) just the AD code with a "service" a/c ? any samples/code ?

how do you impersona