VBScript program demonstrating the use of an efficient IsMember function to test for
group membership for a single user. The function does not reveal membership in
nested
groups. However, it does reveal membership in the "Primary Group". The IsMember
function uses a dictionary object, so that group memberships only have to be enumerated
once, no matter how many times the function is called.
This program uses the WinNT provider to bind to the user or computer object in Active
Directory. The same IsMember function could also be used if the user object is bound
with the LDAP provider.
The WinNT provider does not support computer object group membership. If the WinNT provider
is used, you cannot test for computer group membership.
This program should work on any 32-bit Windows client that can log onto the domain.
Windows NT and Windows 98/95 clients should have DSClient installed. If DSClient is
not installed, they need WSH and ADSI installed.
Typically, this IsMember function would be used in a logon script to map drives to network
shares according to user group membership.
IsMember1.txt <<-- Click here to view or download the program