Windows 2008 VB logon script map drive by group membership

Hello,

I used a basic VB script I found on a microsoft site. The home directory part is working but the group membership mappings are not working. If anyone can tell me what Im doing wrong id appreciate it. Here is the script I used:

Const Finance_GROUP = "cn=SG_Finance"
Const IT_GROUP = "CN=SG_IT"

Set wshNetwork = CreateObject("WScript.Network")
wshNetwork.MapNetworkDrive "h:","\\njfile\us$\" & wshNetwork.UserName

Set adSysInfo = CreateObject("ADSystemInfo")
Set CurrentUser = GetObject("LDAP://" & ADSysInfo.UserName)
strGroups = LCase(Join(CurrentUser.MemberOf))

If InStr(strGroups, finance_GROUP) Then

wshNetwork.MapNetworkDrive "J:","\\njfile\finance"

ElseIf InStr(strGroups, IT_GROUP) Then

wshNetwork.MapNetworkDrive "J:","\\njfile\it$\"

End If

serverbobAsked: 2013-01-04

Who is Participating?

Solutions

LVL 17

Kent DyerConnect With a Mentor IT Security Analyst SeniorCommented: 2013-01-04

I think is more what you are looking for..
http://technet.microsoft.com/en-us/magazine/2006.03.scriptingguy.aspx

HTH,

Kent

LVL 11

netballiConnect With a Mentor Commented: 2013-01-04

Very simple the line

"strGroups = LCase(Join(CurrentUser.MemberOf))"

StrGroups is a array value and you should be spliting the array into its different value like

StrGroups(0), StrGroups(1)......and so on and check for the appropriate group.

LVL 17

Kent DyerConnect With a Mentor IT Security Analyst SeniorCommented: 2013-01-04

This would be helpful to you..

http://www.activexperts.com/activmonitor/windowsmanagement/adminscripts/usersgroups/groups/#RetrieveADGroups.htm

HTH,

Kent

LVL 33

Robberbaron (robr)Connect With a Mentor Commented: 2013-01-05

the scipt itself looks ok as the Join function merges all the array elements of CurrentUser.MemberOf into a single string.

Can you add

Wscript.echo strgroups

Open in new window

after the line that creates StrGroups to check what it's value is. ?

May need to check that it is not empty as well.

the link provided by kent shows a different object used to get membership.
as does this... which i know works.
' ****************************************************************************

**********************

function InGroup(sGroup)
on error resume next
'Checking to see if user is in " & sGroup & " group")

set oDomGrp = GetObject("WinNT://" & sNTDomain & "/" & sGroup)

InGroup = false

if oDomGrp.isMember("WinNT://" & sNTDomain & "/" & sUserName) then
  InGroup = true
else
  InGroup = false 
end if
end function