Need script to check Group membership 1

[larsjuhl]

I need a login script that checks what groups the user is member of and then map the appropiate drives.
I have a Win2000 server and win2000 workstations running AD, I guess this script has been done before so I was hoping someone could supply with one or just help me in the right direction...! im a newbee to scripting.
thx in advance
Lars

 

[Technoqueen]

Try this to get started, this lists all the groups that a user is a member of. You could easily take this and add your mapped drive logic in the for loop.

Hope this helps
TQ


Dim grp, Root, DomainPath, Domain, sOU, sUser
Set Root = GetObject("LDAP://RootDSE&quot
DomainPath = Root.Get("DefaultNamingContext&quot
Set Domain = GetObject("LDAP://" & DomainPath)


sOU = "OU Name"
sUser = "users name"

set objUser = GetObject("LDAP://CN=" & sUser & ",OU=" & sOU & "," & domainpath)

wscript.echo sUser & " is a member of the following groups"
for each objGroup in objUser.Groups
wscript.echo objGroup.Name & vbCRLF
next



set objuser = nothing
set Grp = nothing
set root = nothing
set domain = nothing
set obj = nothing
set oUser = nothing

 

[larsjuhl]

thanks,
can you maybe guide me where I need to change the script so it fits my AD ?

Im having difficulties with the scripting part.. and just need this script to work then I clearly have to start reading books about it!!

 

[larsjuhl]

I have now ended up using kix for this and that went smooth

 

[keithlages]

I'm not the best vbscript writer and I know this could be cleaned up but it works for me. You need to grab IfMember from the MS website and put it on the user's drive or change the path of the exe.

Anyway, here you go:

' .......................................................
' Mapping network drive based on group membership
' .......................................................
Dim oNet, sUser, grp, ret
Set oNet = CreateObject("WScript.Network&quot
sUser = oNet.UserName
Set grp = GetObject("WinNT://Univertical/Clientele Group&quot
ret = grp.IsMember("WinNT://Univertical/" & sUser) ' Should be TRUE.
If ret=True Then
On Error Resume Next
Set Network = CreateObject("WScript.Network&quot
Drive = "Q:"
Share = "\\UNI02\Apps"
DGroup = "Clientele Group"
ELevel = Shell.Run("%SystemRoot%\SYSTEM32\Ifmember " & DGroup,0,True)
WScript.Echo " Mapping drive " & Drive & " to Clientele"
Network.MapNetworkDrive Drive, Share
If Err.Number = 0 Then
WScript.Echo " Map Successful "
Else
WScript.Echo " Error mapping drive " & Drive & " to Clientele"
End If
Else
WScript.Echo " " & sUser & " is not a member of Clientele Group"
End If
' ........................................................

 

[DanaHallenbeck]

This is right off MSDN if you would like to research it further. I modified it a little to work with vbscript.

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/netdir/adsi/iadsuser.asp

You can look at the following links for more information:
ADSI WinNT Provider

http://msdn.microsoft.com/library/en-us/netdir/adsi/adsi_winnt_provider.asp

ADSI Objects of WinNT

http://msdn.microsoft.com/library/en-us/netdir/adsi/adsi_objects_of_winnt.asp

IADsUser

http://msdn.microsoft.com/library/en-us/netdir/adsi/iadsuser.asp

For example purposes the domain is Microsoft, the group is Administrators, and the user is jeffsmith

Dim grp, ret
On Error Resume Next

Set grp = GetObject("WinNT://Microsoft/Administrators&quot
ret = grp.IsMember("WinNT://Microsoft/jeffsmith&quot ' Should be TRUE.
If ret=True Then
wscript.echo "Is a Member"
Else
cleanup
End If

Function Cleanup
MsgBox("An error has occurred. " & ret)
Set grp = Nothing
End function