检查当前用户是否是Active Directory组的成员 [英] Check whether current user is a member of an active directory group

问题描述

我需要检查当前用户是否是Active Directory组的成员。我开始与获取当前用户，如下。现在，我想知道该如何检查的currentUser是Active Directory组CustomGroup

 字符串的currentUser = WindowsIdentity.GetCurrent（）名称。
 

解决方案

您可以使用.NET 3.5 System.DirectoryServices.AccountManagement 类。请参阅MSDN文章管理目录安全主体在.NET Framework 3.5 了解详细信息。您可以使用类似：

 字符串的currentUser = WindowsIdentity.GetCurrent（）名称。

PrincipalContext上下文=新PrincipalContext（ContextType.Domain，域）;
UserPrincipal upUser = UserPrincipal.FindByIdentity（背景下，的currentUser）;
如果（upUser！= NULL）
{
    如果（upUser.IsMemberOf（上下文，IdentityType.SamAccountName，CustomGroup））
    {
        //用户所属的组
    }
}
 

I need to check whether current user is a member of an active directory group. I started with getting the current user as below. Now I want to know how to check this CurrentUser is in active directory group "CustomGroup"

string CurrentUser = WindowsIdentity.GetCurrent().Name;

解决方案

You can use the .NET 3.5 System.DirectoryServices.AccountManagement classes. See the MSDN article Managing Directory Security Principals in the .NET Framework 3.5 for details. You can use something like:

string CurrentUser = WindowsIdentity.GetCurrent().Name;

PrincipalContext context = new PrincipalContext(ContextType.Domain, "Domain");
UserPrincipal upUser = UserPrincipal.FindByIdentity(context, CurrentUser);
if(upUser != null)
{
    if (upUser.IsMemberOf(context, IdentityType.SamAccountName, "CustomGroup")) 
    {
        // The user belongs to the group
    }
}

这篇关于检查当前用户是否是Active Directory组的成员的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！