rubbish?  you mean "pants"? :)

Sent from my iPad so please excuse all the typos

On Jun 6, 2013, at 9:58 AM, 
"kz2...@googlemail.com<mailto:kz2...@googlemail.com>" 
<kz2...@googlemail.com<mailto:kz2...@googlemail.com>> wrote:

Oh ok, didn't think of gpresult. Let me see if I can leverage gpresult from PS 
to get what I need (just a Registry flag, which shouldn't burden my rubbish PS 
skills too much)

Cheers,


JR
Sent from my Blackberry, which may be an antique but delivers email RELIABLY
________________________________
From: "Christopher Bodnar" 
<christopher_bod...@glic.com<mailto:christopher_bod...@glic.com>>
Sender: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>
Date: Thu, 6 Jun 2013 10:17:31 -0400
To: <ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.com>>
ReplyTo: ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.com>
Subject: Re: [NTSysADM] PowerShell query

A lot of this will depend on when the script runs during the boot process. Each 
time a machine boots it re-evaluates group membership and generates a token. As 
for how to get this info without contacting a domain controller, the output of 
GPRESULT will show it.


HTH

Christopher Bodnar
Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture 
and Engineering Services
Tel 610-807-6459
3900 Burgess Place, Bethlehem, PA 18017
christopher_bod...@glic.com<mailto:>


[cid:_2_0D2C04380D2C02E8004E826F85257B82]

The Guardian Life Insurance Company of America

www.guardianlife.com<http://www.guardianlife.com/>








From:        James Rankin <kz2...@googlemail.com<mailto:kz2...@googlemail.com>>
To:        NTSysADM@lists.myitforum.com<mailto:NTSysADM@lists.myitforum.com>
Date:        06/06/2013 09:53 AM
Subject:        [NTSysADM] PowerShell query
Sent by:        
listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>
________________________________



Is it possible to use PowerShell to enumerate the group memberships for a 
computer from the security token? That is, in a way that it will return the 
group memberships even if AD DC connectivity is not available (for instance, at 
boot time)?

Google-fu seems lacking on this subject, after a few efforts...

Cheers,



--
James Rankin
Technical Consultant (ACA, CCA, MCTS)
http://appsensebigot.blogspot.co.uk<http://appsensebigot.blogspot.co.uk/>
----------------------------------------- This message, and any attachments to 
it, may contain information that is privileged, confidential, and exempt from 
disclosure under applicable law. If the reader of this message is not the 
intended recipient, you are notified that any use, dissemination, distribution, 
copying, or communication of this message is strictly prohibited. If you have 
received this message in error, please notify the sender immediately by return 
e-mail and delete the message and any attachments. Thank you.

Reply via email to