IFMEMBER (Windows 2003 Resource Kit)

Find out if the current user is a member of one or more groups.

Syntax
      IFMEMBER [options] Group [ Group2 Group3...]

Options:
        /verbose or /v   : print all matches.
        /list    or /l   : print all groups user is a member of

The %ERRORLEVEL% return code shows how many of the listed groups the currently logged-in user is a member of.

When checking a single group, an %errorlevel% of 1 = Success

To also test for nested permissions use VBScript or PowerShell Get-adGroupMember.

Examples

Is the current user a member of Domain Administrators:

IFMEMBER /v /l "MyDomain\Administrators"
IF ERRORLEVEL 1 echo This user is an Administrator

Is the current user a member of Local Administrators?
using conditional execution:

IFMEMBER Administrators || ECHO Error is 1 so [%Username%] is an Admin

IFMEMBER Administrators && ECHO Error is 0 so [%Username%] is NOT an Admin

“The euro will raise the citizens' awareness of their belonging to one Europe more than any other integration step to date” ~ Gerhard Schroeder

Related commands

NET GROUP - Add or remove a user from a group.
Joeware.net - MemberOf.exe - Like IFMEMBER but able to handle nested AD groups.


 
Copyright © 1999-2024 SS64.com
Some rights reserved