Find Active Directory Groups a User Belongs To

[bob000]

Microsoft provides this script at:

http://www.microsoft.com/technet/scriptcenter/user/scrug109.asp

-------------------------
On Error Resume Next
Const E_ADS_PROPERTY_NOT_FOUND = &h8000500D

Set objUser = GetObject _
("LDAP://cn=MyerKen,ou=Management,dc=NA,dc=fabrikam,dc=com&quot

intPrimaryGroupID = objUser.Get("primaryGroupID&quot
arrMemberOf = objUser.GetEx("memberOf&quot

If Err.Number = E_ADS_PROPERTY_NOT_FOUND Then
WScript.Echo "The memberOf attribute is not set."
Else
WScript.Echo "Member of: "
For each Group in arrMemberOf
WScript.Echo Group
Next
End If

Set objConnection = CreateObject("ADODB.Connection&quot
objConnection.Open "Provider=ADsDSOObject;"
Set objCommand = CreateObject("ADODB.Command&quot
objCommand.ActiveConnection = objConnection
objCommand.CommandText = _
&quot;<LDAP://dc=NA,dc=fabrikam,dc=com>;(objectCategory=Group);&quot; & _
&quot;distinguishedName,primaryGroupToken;subtree&quot;
Set objRecordSet = objCommand.Execute

While Not objRecordset.EOF
If objRecordset.Fields(&quot;primaryGroupToken&quot = intPrimaryGroupID Then
WScript.Echo &quot;Primary group:&quot;
WScript.Echo objRecordset.Fields(&quot;distinguishedName&quot & _
&quot; (primaryGroupID: &quot; & intPrimaryGroupID & &quot&quot;
End If
objRecordset.MoveNext
Wend

objConnection.Close
---------------
Can someone explain this line and where each parameter comes from in an Active Directory. My script errors on this line that I have changed for my environment.

Set objUser = GetObject _
(&quot;LDAP://cn=MyerKen,ou=Management,dc=NA,dc=fabrikam,dc=com&quot

 

[RobSchultz]

What is the error?

Rob
robschultz@yahoo.com
-Focus on the solution to the problem, not the obstacles in the way.-

 

[bob000]

The error I am getting is:
There is no such object on the server, Thx.

 

[djhawthorn]

Have you set up this line

(&quot;LDAP://cn=MyerKen,ou=Management,dc=NA,dc=fabrikam,dc=com&quot

To point to your own user, OU and domain?

MCSE NT4/W2K

 

[bob000]

Ok in this line:
(&quot;LDAP://cn=MyerKen,ou=Management,dc=NA,dc=fabrikam,dc=com&quot
cn=MyerKen !this is the user
ou=Management !I changed this to &quot;Users&quot; were our users, are in Active Directory, correct?
dc=NA !what it this?
dc=fabrikam !domain
dc=com !domain name extension

 

[Niavlys]

I think &quot;Users&quot; is &quot;seen&quot; as a container and not a OU in AD.

Try (&quot;LDAP://cn=lastname firstname,cn=users,dc=...)

hope this helps!

 

[PHV]

>dc=NA           !what it this?
>dc=fabrikam     !domain
>dc=com          !domain name extension

Domain is : NA.fabrikam.com (I guess ...)

Hope This Help
PH.