Nesting Domain Group Roles

From: Karl Mikesell (multisy_at_ieee.org)
Date: 09/18/04 

Date: Sat, 18 Sep 2004 14:40:06 -0500

  The problem is user Roles does not include Role as member of any Domain
Group.

    SPWeb oWeb = docFile.ParentFolder.ParentWeb;
    SPUser oUser = oWeb.CurrentUser;
    SPRoleCollection oRoles = oUser.Roles;
    foreach (SPRole oRole in oRoles)
    {
     sb.Append("<BR><FONT color=RED>");
     sb.Append(oRole.Name.ToString());
     sb.Append("</FONT> : <FONT color=blue>");
     sb.Append(oRole.Type.ToString());
     sb.Append("</FONT>");
    }

Is there a simple way to determine Domain Group membership of Users, so Role
of user can be determined. What if Domain Group is nested within another
Domain Group and so on. How to get user Real Role (including nested Domain
Groups)?

Any Insights

Relevant Pages

  • Re: Giving Accounts Local Computer Admin Privledge
    ... You can modify local group memberships in a startup script. ... then make the domain group a member of the local Administrators group. ... ' Check if domain group already a member. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Remote Desktop rights to Member Servers via GPO
    ... of this group and adds your domain group via the net localgroup /add ... My understanding of Restricted groups is that the GPO will ... SP4 or better Active Directory Domain + Member servers, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Policy to allow TS access to servers
    ... add the domain group with the user accounts as members to the Remote Desktop Users group on the Terminal Server. ... the will get whatever rights and permissions on the Terminal Server that being a member of another local group (e.g. ...
    (microsoft.public.windows.group_policy)
  • Re: Add domain user to local group script troubleshoot
    ... it works great when I'm already a member of the ... and thus my Computers OU underneath, but am not a domain admin and so am not ... by default in the local admins group of each computer. ... practice would be to add a domain group to the local Administrators group on ...
    (microsoft.public.windows.server.scripting)