Reading AD Security groups

28 Jul 2005 2:37 PM

weeims

Hi,

When a user visits my site (ASP.NET + VB.NET), I need to know if they are in
a particular AD security group in order to display the pertinant information.

When I call UserLookup in code below it works well at returning whether the
user is directly a member of the group. However, if they are contained inside
of an inherited security group, it returns false because it will not search
recursively.

I thought this would be simple to find information on, but apparently I
thought wrong.

Any help would be appreciated.

CODE:
The class has DOMAINNAMEVALUE, SERVERNAMEVALUE and GROUPNAMEVALUE initalized
in the constructor.

    Public Function ReturnUsers()
        Dim strDirEntryPath As String
        strDirEntryPath = "WinNT://" & DomainNameValue & "/" &
ServerNameValue & "/" & GroupNameValue & ",group"
        Dim users As Object

        Dim group As New DirectoryEntry(strDirEntryPath)
        users = group.Invoke("members")

        Dim user1 As Object
        Dim UsersCollection As New Collection

        For Each user1 In CType(users, IEnumerable)
            Try
                Dim userEntry As New
System.DirectoryServices.DirectoryEntry(user1)
                UsersCollection.Add(userEntry.Name)
            Catch e1 As Exception
                Return e1
                Exit Function
            End Try
        Next

        Return UsersCollection
    End Function

    'returns true/false if a person is in an AD security group or not
    Public Function UserLookup(ByVal user As String)

        Dim i As Integer
        Dim UsersCollection As New Collection
        Dim Match As Boolean = False

        Match = CheckUser()

        UsersCollection = Me.ReturnUsers

        For i = 1 To UsersCollection.Count
            If UsersCollection.Item(i) = user Then
                Match = True
                Return Match
            End If
        Next

    End Function

--
Weeims

28 Jul 2005 2:47 PM

Bob Butler

"weeims" <weeims@nospam.nospam> wrote in message news:2D683256-017C-

493C-9753-1D66EE993***@microsoft.com
Show quoteHide quote

> Hi,
>
> When a user visits my site (ASP.NET + VB.NET), I need to know if they

--
<response type="generic" language="VB.Net">
This newsgroup is for users of Visual Basic version 6.0
and earlier and not the misleadingly named VB.Net
or VB 200x. Solutions, and often even the questions,
for one platform will be meaningless in the other.
When VB.Net was released Microsoft created new newsgroups
devoted to the new platform so that neither group of
developers need wade through the clutter of unrelated
topics. Look for newsgroups with the words "dotnet" or
"vsnet" in their name. For the msnews.microsoft.com news
server try these:

microsoft.public.dotnet.general
microsoft.public.dotnet.languages.vb

</response>