Quote:

If the INGROUP function only queries the groups the script initiator is a member of, then another method like querying AD for user membership, then using the results in an array may be a work around for your situation.

I'm not intimately familiar with the LDAP querying UDFs, so my recommendation was more of an impression of what may be a good direction for you to go, rather than an authoritative suggestion.



Right. Well, the nice thing about InGroup() is that it checks nested membership. So if I'm a member of "Division Admins" which is a member of "Department Admins", then If InGroup("Department Admins") would be true.

Dumping group names from AD would only give me the immediate groups that the user is a member of...I would then need to recursively check membership on those groups. If that's the way I need to go about this, then that's what I'll do...but I just wanted to see if somebody had already written something.