IFMEMBER (Windows 2003 Resource Kit)

Find out if the current user is a member of one or more groups.

      IFMEMBER [options] Group [ Group2 Group3...]

        /verbose or /v   : print all matches.
        /list    or /l   : print all groups user is a member of

The %ERRORLEVEL% return code shows how many of the listed groups the currently logged-in user is a member of.

To also test for nested permissions use VBScript or PowerShell Get-adGroupMember.


IFMEMBER /v /l "MyDomain\Administrators"
IF ERRORLEVEL 1 echo This user is an Administrator

Notice that the syntax here is the opposite to most other commands in that an %errorlevel% of 1 = Success

A good way to utilise IFMEMBER is through conditional execution...

IFMEMBER Administrators || ECHO Error is 1 so [%Username%] is an Admin

IFMEMBER Administrators && ECHO Error is 0 so [%Username%] is NOT an Admin

“The euro will raise the citizens' awareness of their belonging to one Europe more than any other integration step to date” ~ Gerhard Schroeder


NET GROUP - Add or remove a user from a group - MemberOf.exe - Like IFMEMBER but able to handle nested AD groups

© Copyright 1999-2015
Some rights reserved