Solved

If member of "group"in Microsoft Logon Script

Posted on 2007-11-28
4
6,835 Views
Last Modified: 2009-08-14
I came from a Novell environment using NDS and now have a need to check if a user is a member of a group in the logon script:

Set.......what ever
next statement....whatever
IF MEMBER OF "DIRECTORS: THEN
  RUN THIS
ENDIF

That's all I wan to do, but can't find out how to do an if statement in the logon script
0
Comment
Question by:hospicecc
  • 3
4 Comments
 
LVL 38

Expert Comment

by:Hypercat (Deb)
ID: 20368531
First, you need to download the Windows Resource Kit tools.  There is a specific tool in there named "ifmember.exe."  You need to put this executable in your NETLOGON share, and then used the statement in the login script as described:

ifmember [/v|/verbose [/l|/list]|[GroupName1 [GroupName2] ...]

/v|/verbose GroupName1 [GroupName2] ...]
Prints all group matches.

Note
If you are using IfMember interactively, you must use the /v parameter to determine whether or not the current user is a member of the specified group.

/l|/list
Lists all groups of which the user is a member.

GroupName
Specifies one or more group names (separated by a spaces).

The above help information and additional more detailed information on the tool is in the help file that comes along with the resource kit.
0
 
LVL 38

Accepted Solution

by:
Hypercat (Deb) earned 500 total points
ID: 20368587
PS Here's a more specific sample:

set GROUP1=YourGroup
<<Insert additional "set" commands for additonal groups>>

if "%GROUP1%"=="" goto NOGROUP1
      ifmember %GROUP1%
      if not errorlevel 1 goto NOGROUP1
                    <<Insert here the drives you want to map or other commands to run for group members>>
NOGROUP1
<<Insert here other commands not dependent on group membership.>>

You repeat the if statement section as often as necessary to cover all groups defined in the set commands.

0
 

Author Comment

by:hospicecc
ID: 20368662
This is really great information and I'll get ifmember in just a minute..Thanks.

The group I'm trying to query is a group(s) already defined in AD however not established  through a set command.  

I won't have the opportunity to execute a specific set command to set up a variable, so I'll have to go against group membership already established in AD.
0
 
LVL 38

Expert Comment

by:Hypercat (Deb)
ID: 20368748
The "set" command is part of the script - shown at the top of my example - that is referring to the groups defined in Active Directory.  It just declares the value for the variable named "GROUP1" in the script. For example, if your AD group is called, as in my sample, "YourGroup," then in your login script, your "set" command to define the variable "GROUP1" is:

set GROUP1 = YourGroup

Then, in the if statement referring to %GROUP1%, the script will substitute the value "YourGroup" when it runs.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The password reset disk is often mentioned as the best solution to deal with the lost Windows password problem. In Windows 2008, 7, Vista and XP, a password reset disk can be easily created. But besides Windows 7/Vista/XP, Windows Server 2008 and ot…
Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question