Group membership checking

[Creto]

I'm trying to check to see if the current user is a member of a certain group, but my script keeps failing. Everything I can find shows that what I have should work, but it's failing on the GetObject().

Function IsMember(groupName)

  Set netObj = CreateObject("WScript.Network")
  domain = netObj.UserDomain
  user = netObj.UserName
  flgIsMember = false
  [highlight]Set userObj = GetObject("WinNT://" & domain & "/" & user & ",user")[/highlight]
  For Each grp In userObj.Groups
    If grp.Name = groupName Then
      flgIsMember = true
      Exit For
    End If
  Next
  IsMember = flgIsMember
  Set userObj = nothing
  Set netObj = nothing

End Function

retCode = IsMember("GP Export Reports")

Response.Write retCode

I've verified that the GetObject string is being properly populated, but it still breaks at that point. I've tried various methods, all using GetObject, but they fail.

Any help is appreciated.

 

[ChrisHirst]

Is the webserver a AD controller or just a member server?

and what's the error?




Chris.

Indifference will be the downfall of mankind, but who cares?

http://www.candsdesign.co.uk

A website that proves the cobblers kids adage.

http://www.cram-system.com

Nightclub counting systems

So long, and thanks for all the fish.

 

[Creto]

It's a member server and the error is:

error '800401e4'
Invalid syntax

 

[ChrisHirst]

1/ ADSI functions don't run on a member server. It has to be a domain controller.

and when running on IIS on a AD contoller netObj.UserDomain will be empty and netObj.UserName will be IUSR_servername

Chris.

Indifference will be the downfall of mankind, but who cares?

http://www.candsdesign.co.uk

A website that proves the cobblers kids adage.

http://www.cram-system.com

Nightclub counting systems

So long, and thanks for all the fish.

 

[Creto]

Is there a way, without it running on a domain controller, to check group permissions then? Or is that the only option?

 

[ChrisHirst]

The ADSI function DLLs are only installed on AD controllers. So you would need IIS and the ADSI scripts on a controller and possibly use the XMLHTTP object to request remote data from the AD script pages.



Chris.

Indifference will be the downfall of mankind, but who cares?

http://www.candsdesign.co.uk

A website that proves the cobblers kids adage.

http://www.cram-system.com

Nightclub counting systems

So long, and thanks for all the fish.

 

[Creto]

Thanks Chris.

I'll have to see if I can come up with another method of checking groups since IIS on the controller isn't an option.

- Brandon