Additionally primary group membership and nested membership will not be retrieved with memberof. Someone could be in several groups in the same domain as their userid via nesting and the primary group and memberof would never have anything.
joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Passo, Larry Sent: Tuesday, January 04, 2005 10:27 AM To: [email protected] Subject: RE: [ActiveDir] Script working for some users, and not for others? Do you have a multiple domain forest? If so, the memberof attribute will not show group memberships if they are domain local groups in other domains. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe L. Casale Sent: Monday, January 03, 2005 1:32 PM To: [email protected] Subject: RE: [ActiveDir] Script working for some users, and not for others? Yes, it does have it. Its just not working for some people? They are all win2ksp4 and above. Thanks! jlc -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Passo, Larry Sent: Monday, January 03, 2005 2:29 PM To: [email protected] Subject: RE: [ActiveDir] Script working for some users, and not for others? Do you also have "Set adSysInfo = CreateObject("AdSystemInfo")" before these 4 lines? Also, are the clients that are failing older than Win2k? If so, they need to have the AD client extension added. http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adsi/ad si/iadsadsysteminfo.asp -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe L. Casale Sent: Monday, January 03, 2005 12:41 PM To: [email protected] Subject: [ActiveDir] Script working for some users, and not for others? Hi all, I have this in my logion script, and for some users it works, and others the echo is blank? Set CurrentUser = GetObject("LDAP://"; & ADSysInfo.UserName) wscript.echo ADSysInfo.UserName strGroups = LCase(Join(CurrentUser.MemberOf)) wscript.echo strGroups Is there any known reason someone might share, or a caveat to using this method? Is there a more robust way to get group membership? Thanks! jlc List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
