Reading Nested Groupnames from Active Directory using Users SAMAccountName

debugcn Published at Dev

user2527636

I need a function to recursively get all groups names a specified user (as function argument) is a member of. The Function header should look like this where SAMAccountName is the Username I want to get the groups from:

public List<string> GetUsersGroups(string SAMAccountName);

I hope you can help me.

Thanks in advance.

Jermu Virtanen

I'm assuming your problem is active directory side knowledge, not c#.

Basically task is ldap action, but I'll give examples using adfind that is quick and handy tool to output ldap queries to csv file for example. Functions you have to create by yourself.

There are 2 functions you need:

Function 1, find DN from samaccountname: adfind -dsq -f samaccountname=username

Function 2, find groups, including nested ones: adfind -f "(member:1.2.840.113556.1.4.1941:=CN=USERDN,OU=USERS,DC=DOMAIN,DC=COM)" samaccountname -list

Please find adfind syntax from joeware website: http://www.joeware.net/freetools/tools/adfind/usage.htm

For nested groups, more information: http://msdn.microsoft.com/en-us/library/aa746475(v=vs.85).aspx https://social.technet.microsoft.com/Forums/scriptcenter/en-US/f238d2b0-a1d7-48e8-8a60-542e7ccfa2e8/recursive-retrieval-of-all-ad-group-memberships-of-a-user?forum=ITCG

Collected from the Internet

Please contact [email protected] to delete if infringement.

edited at2021-07-2

Comments

0 comments

From Dev

Related Related

Article

Reading Nested Groupnames from Active Directory using Users SAMAccountName

Reading Nested Groupnames from Active Directory using Users SAMAccountName

Fetching Sharepoint Groupnames and users in group using web services in MOSS 2007

SQL with Active Directory and nested groups/users

Using LDAP to find Users in Active Directory - no Users?

Add users to active directory using LDIFDE

Read deleted users from Active directory

VSTS Adding Users from Azure Active Directory

Extract all users from active directory groups from multiple domains using Powershell?

Reading .dcm files from a nested directory

sAMAccountName is missing from Lightweight Directory Services instance

Active Directory List of Users

Active Directory Users homespace

Add users to Active Directory

Create users on Microsoft Active Directory using a Scripting Language

Allowing users to log into web application using Active Directory with C#

Create users on Microsoft Active Directory using a Scripting Language

Display all users under all OUs in active directory using adLDAP?

Active Directory - restricting permissions for users using different (native) apps

New active directory users cannot login from client

Setting login shell in SSS configuration for users from Active Directory

Export all the users from a Active Directory server to CSV

Autocomplete Textbox from Active Directory usind LDAP Users in php

Adding Users from one Azure Active Directory to access an application in another Azure Active Directory

Determine If Users Are In Active Directory With PowerShell

Setting flags for users (Active Directory)

Missing users in Centrify active directory

Determine If Users Are In Active Directory With PowerShell

Disable Active Directory Inactive Users

Samba use Active Directory users

Active Directory reading user attributes