Comments on: Windows Batch Scripting: Mitgliedschaft von AD-Sicherheitsgruppen des Benutzers prüfenWindows Batch Scripting: Check if user is a member of an AD security group https://www.dxsdata.com/2016/01/windows-batch-scripting-check-if-user-is-a-member-of-an-ad-security-group/ Software | Network | Administration Wed, 11 Mar 2020 19:18:12 +0000 hourly 1 https://wordpress.org/?v=6.9.1 By: Emile https://www.dxsdata.com/2016/01/windows-batch-scripting-check-if-user-is-a-member-of-an-ad-security-group/#comment-115 Wed, 11 Mar 2020 19:18:12 +0000 http://www.dxsdata.com/?p=1046#comment-115 :: if user is a member of group associated with S-1-5-21-167335082-2949395101-2103287839-2219 map drive O:
for /f “tokens=* delims=” %%i in (‘whoami /groups ^| findstr “S-1-5-21-167335082-2949395101-2103287839-2219″‘) do (
IF errorlevel 0 if not errorlevel 1 call :mapo
)
:: if user is a member of group associated with S-1-5-21-167335082-2949395101-2103287839-1384 map drive L:
for /f “tokens=* delims=” %%i in (‘whoami /groups ^| findstr “S-1-5-21-167335082-2949395101-2103287839-1384″‘) do (
IF errorlevel 0 if not errorlevel 1 call :mapl
)

exit /b 0

:: subroutines below
:mapo
net use O: /delete /y >NUL
net use O: \\myserver\myshare0 >NUL
exit /b 0

:mapl
net use L: /delete /y >NUL
net use L: \\myserver\myshare1 >NUL
exit /b 0

]]> By: sean https://www.dxsdata.com/2016/01/windows-batch-scripting-check-if-user-is-a-member-of-an-ad-security-group/#comment-114 Wed, 26 Feb 2020 18:09:03 +0000 http://www.dxsdata.com/?p=1046#comment-114 In reply to Yaroslav.

how can you do this for PC account not user?

]]> By: Yaroslav https://www.dxsdata.com/2016/01/windows-batch-scripting-check-if-user-is-a-member-of-an-ad-security-group/#comment-113 Sun, 16 Sep 2018 06:46:58 +0000 http://www.dxsdata.com/?p=1046#comment-113 Hi there. Your script always gives false positive result 🙁

Better to use net group check:

for /f %%f in (‘”net group %ADgroup% /domain | findstr /i %ADuser%”‘) do set /a i=%i%+1

]]>