IsinRole功能仅适用于内置角色 [英] IsinRole function only works with built-in roles

问题描述

这是关于同一主题的第二篇文章，我很抱歉。


IsinRole功能仅适用于内置角色。如果我在

我的域控制器上创建一个新组，然后将现有用户添加到该组，用户bob，

组TestUsers，然后尝试确定是否My.user。 Isinrole（TestUsers）I

总是得到错误，这是不正确的。

如果我把Bob作为管理员或任何其他内置组的一部分放在DC

并查看My.User.isinrole（管理员）我知道，这是正确的


这是一个错误吗？我需要确定我的应用程序的用户是否是我在域控制器上创建的

组的一部分。如果我不能使用isinrole这样做，

我该怎么做？我已经查看了自定义身份验证的演练

但这不是我需要做的。我只需要能够看到我的用户

是否在我在域控制器上创建的组中。


任何帮助都将受到赞赏。


鲍勃

This a bit of a second post on same subject, my apologies.

IsinRole function only works with built-in roles. If I create a new group on
my domain controller then add an existing user to that group, user bob,
group TestUsers and then try to determine if My.user.Isinrole("TestUsers") I
always get a false, which is incorrect.
If I put Bob as part of Administrators or any other built-in group on the DC
and look at My.User.isinrole("Administrators") I get true, which is correct

Is this a bug? I need to determine if my application''s user is part of a
group I created on my domain controller. If I can''t use isinrole to do that,
how can I do that? I''ve looked at the walkthrough for custom authentication
but that''s not what I need to do. I simply need to be able to see if my user
is in a group I created on the domain controller.

Any help would be appreciated.

Bob

推荐答案

附加信息：

我还看了一下whoami / groups在我的工作站上，我注意到用户Bob所属的

自定义组不会出现在列表中。我看到15

用户组。我在本地机器上创建了一个自定义的，但没有在DC上创建

。


我在本地的Customone上测试了Isinrole机器通过指定

域名和isinrole中的本地组并且工作正常。


所以问题变成了，为什么我的自定义组出现了问题是一个会员吗

没有被whoami和isinrole使用的系统程序检测到？

对不起，不能换一种说法吗？


任何帮助再次非常感谢。


Bob


" Bob" < BD ***** @ sgiims.com>在留言中写道

新闻：％2 **************** @ TK2MSFTNGP11.phx.gbl ...

Additional Info:
I also looked at whoami /groups on my workstation and I notice that the
custom groups that User Bob belongs to do not appear in the list. I see 15
user groups. One custom one I created on the local machine, but none that
have been created on the DC.

I tested the Isinrole on the Customone on the local machine by specifying
the domain name and the local group in the isinrole and that works fine.

So the question becomes, why does my custom groups that bob is a member do
not get detected by whoami and by the system procedures that isinrole uses?
Sorry can''t put it another way?

Any help again greatly appreciated.

Bob

"Bob" <bd*****@sgiims.com> wrote in message
news:%2****************@TK2MSFTNGP11.phx.gbl...

这是一个对于同一主题的第二篇文章，我的道歉。

IsinRole功能仅适用于内置角色。如果我在我的域控制器上创建一个新组
然后将现有用户添加到该组，用户bob，
组TestUsers，然后尝试确定是否My.user.Isinrole（TestUsers）
我总是得到一个错误，这是不正确的。
如果我把Bob作为管理员或任何其他内置组的一部分放在
DC上并查看My.User.isinrole（"管理员"）我明白了，这是正确的

这是一个错误吗？我需要确定我的应用程序的用户是否是我在域控制器上创建的
组的一部分。如果我不能使用isinrole来做那个，我怎么能这样做？我已经查看了自定义
身份验证的演练，但这不是我需要做的。我只需要能够看看我的用户是否在我在域控制器上创建的组中。

任何帮助都将受到赞赏。

鲍勃

This a bit of a second post on same subject, my apologies.

IsinRole function only works with built-in roles. If I create a new group
on my domain controller then add an existing user to that group, user bob,
group TestUsers and then try to determine if My.user.Isinrole("TestUsers")
I always get a false, which is incorrect.
If I put Bob as part of Administrators or any other built-in group on the
DC and look at My.User.isinrole("Administrators") I get true, which is
correct

Is this a bug? I need to determine if my application''s user is part of a
group I created on my domain controller. If I can''t use isinrole to do
that, how can I do that? I''ve looked at the walkthrough for custom
authentication but that''s not what I need to do. I simply need to be able
to see if my user is in a group I created on the domain controller.

Any help would be appreciated.

Bob

鲍勃，我知道在我们这里工作的域名我们必须重启我们的机器

拿起来自DC的新定义。你试过吗？


" Bob" < BD ***** @ sgiims.com>在消息中写道

新闻：OH ************** @ TK2MSFTNGP11.phx.gbl ...

Bob, I know that on our domain here at work we have to reboot our machine to
pick up the new definition from the DC. Have you tried that?

"Bob" <bd*****@sgiims.com> wrote in message
news:OH**************@TK2MSFTNGP11.phx.gbl...

其他信息：自定义组不会出现在列表中。我看到15个用户组。我在本地机器上创建了一个自定义的，但没有在DC上创建的。

我在本地机器上的Customone上测试了Isinrole，指定
域名和isinrole中的本地组，工作正常。

所以问题变成了，为什么我的自定义组bob是一个成员呢
没有被whoami和系统程序是否正在使用？对不起，不能换一种方式吗？

任何帮助再次非常感谢。

Bob

Bob < BD ***** @ sgiims.com>在消息中写道
新闻：％2 **************** @ TK2MSFTNGP11.phx.gbl ...

Additional Info:
I also looked at whoami /groups on my workstation and I notice that the
custom groups that User Bob belongs to do not appear in the list. I see 15
user groups. One custom one I created on the local machine, but none that
have been created on the DC.

I tested the Isinrole on the Customone on the local machine by specifying
the domain name and the local group in the isinrole and that works fine.

So the question becomes, why does my custom groups that bob is a member do
not get detected by whoami and by the system procedures that isinrole
uses? Sorry can''t put it another way?

Any help again greatly appreciated.

Bob

"Bob" <bd*****@sgiims.com> wrote in message
news:%2****************@TK2MSFTNGP11.phx.gbl...

这一点点在同一主题上发帖，我很抱歉。

IsinRole功能仅适用于内置角色。如果我在我的域控制器上创建一个新组
然后将现有用户添加到该组，用户
bob，group TestUsers，然后尝试确定是否
My.user.Isinrole（" TestUsers"）我总是得到一个错误，这是不正确的。
如果我把Bob作为管理员或任何其他内置组的一部分放在
DC上并查看My.User.isinrole（"管理员"）我明白了，这是正确的

这是一个错误吗？我需要确定我的应用程序的用户是否是我在域控制器上创建的
组的一部分。如果我不能使用isinrole来做那个，我怎么能这样做？我已经查看了自定义
身份验证的演练，但这不是我需要做的。我只需要能够看看我的用户是否在我在域控制器上创建的组中。

任何帮助都将受到赞赏。

鲍勃

This a bit of a second post on same subject, my apologies.

IsinRole function only works with built-in roles. If I create a new group
on my domain controller then add an existing user to that group, user
bob, group TestUsers and then try to determine if
My.user.Isinrole("TestUsers") I always get a false, which is incorrect.
If I put Bob as part of Administrators or any other built-in group on the
DC and look at My.User.isinrole("Administrators") I get true, which is
correct

Is this a bug? I need to determine if my application''s user is part of a
group I created on my domain controller. If I can''t use isinrole to do
that, how can I do that? I''ve looked at the walkthrough for custom
authentication but that''s not what I need to do. I simply need to be able
to see if my user is in a group I created on the domain controller.

Any help would be appreciated.

Bob

嗨鲍勃，


另外你可以简单地注销并重新登录到机器上，看看是否有效。

Whoami工具是检查你的团体会员名单的好工具。


祝你好运，

Peter Huang

微软在线合作伙伴支持


获取安全！ - www.microsoft.com/security

此帖子原样是按原样提供的。没有保证，也没有授予任何权利。

Hi Bob,

Also you may simply logoff and relogon to the machine to see if that works
for you.
Whoami tool is a good tool to check your group membership list.

Best regards,

Peter Huang
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security
This posting is provided "AS IS" with no warranties, and confers no rights.

这篇关于IsinRole功能仅适用于内置角色的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！