Function ComputerInGroup($group,optional $Domain)
	Dim $oGrp
	if not $domain		$domain=@domain		EndIf
	$oGrp = GetObject("WinNT://" + $domain + "/"  + $group + ",group" )
	if @error	exit 1		EndIf

	if $oGrp.IsMember("WinNT://" + $domain + "/"  + @wksta + "$$" )
		$ComputerInGroup=1
	else
		$ComputerInGroup=0
		endif
EndFunction
	
If ComputerInGroup('PREMCOR_SMS_EXCLUSION')=1
	? 'Computer will not install SMS'
Else
	? 'Computer will install SMS'
EndIf

Sleep 5

Quote:

---

What do you want us to say that you haven't already said? If you look at the code, you can see it does not do nested groups. You would have to rewrite it, or talk nice to someone to rewrite it for you.

---

Quote:

---

This code is written using the the NT4 compatible WinNT:// ADSI provider. If you want to understand nested group memberships, then someone needs to investigate other methods Microsoft has to check group membership. If I get time, I may sift throught MSDN.microsoft.com to see if the LDAP ADSI provider support this. If Microsoft can perform this task, there is usually way for us to access that functionality.

---

Quote:

---

The question is why nest local groups in global groups in this case? Unless the local group is on a different resource than the global group, it makes no sense.

---

if computeringroup('PREMCOR_SMS_EXCLUSION')
    Skip SMS
else
    Install SMS
endif

if Getobject(AdsPathOfTheGroup).IsMember(AdsPathOfTheMachine)
  ; Exclude from SMS
else
  ; Install SMS
endif

Quote:

---

Determining a User's or Group's Membership in a Group
The IADsGroup.IsMember method can be used to determine if an object is a member of a group. This method returns TRUE if the specified object is a direct member of the group, that is, the group's member property contains the specified object.

A group can contain other groups. The IADsGroup.IsMember method does not recursively verify the members of groups in its member property, groups within those groups, and so on. To recursively verify that an object is a member of a group, enumerate the groups in the member property, verify the members of those groups to see if the object is a member, and if those groups contain other groups, check their members, and so on.

---

Function InstallSMS()
   ; Create global groups in each OU using the naming format "OUname_NO_SMS"
   ; Add computers to these groups that do not get SMS
   
   Dim $Install_SMS
   $Install_SMS = 1
   
   $oComputer = GetObject("WinNT://domain/" + @wksta + "$" + ",user")
   $GrpArray =  $oComputer.Groups
   For Each $grp In $GrpArray
       if Right($grp,6) = "NO_SMS"
       	$Install_SMS = 0
       endif
   Next
   
   If $Install_SMS
   	;do something...
   Endif
Endfunction