IFMEMBER (Windows 2003 Resource Kit)

Find out if the current user is a member of one or more groups.

Syntax
      IFMEMBER [options] Group [ Group2 Group3...]

Options:
        /verbose or /v   : print all matches.
        /list    or /l   : print all groups user is a member of

The %ERRORLEVEL% return code shows how many of the listed groups the currently logged-in user is a member of.

To also test for nested permissions use VBScript or PowerShell Get-adGroupMember.

Examples

IFMEMBER /v /l "MyDomain\Administrators"
IF ERRORLEVEL 1 echo This user is an Administrator


Notice that the syntax here is the opposite to most other commands in that an %errorlevel% of 1 = Success

A good way to utilise IFMEMBER is through conditional execution...

IFMEMBER Administrators || ECHO Error is 1 so [%Username%] is an Admin

IFMEMBER Administrators && ECHO Error is 0 so [%Username%] is NOT an Admin

“The euro will raise the citizens' awareness of their belonging to one Europe more than any other integration step to date” ~ Gerhard Schroeder

Related:

NET GROUP - Add or remove a user from a group
Joeware.net - MemberOf.exe - Like IFMEMBER but able to handle nested AD groups


© Copyright SS64.com 1999-2014
Some rights reserved