• Home
 · 
• Miscellaneous
 · 
• Verify group members of an AD/NT group. If the group contains unwanted members, FALSE is returned.

Verify group members of an AD/NT group. If the group contains unwanted members, FALSE is returned.

Verify group members of an AD/NT group. If the group contains unwanted members, FALSE is returned.

Rate Verify group members of an AD/NT group. If the group contains unwanted members, FALSE is returned.

• 1
• 2
• 3
• 4
• 5

(1(1 Vote))

' This function checks all members of strGroup. If an element of this
' group is not member of the strMemberList, then False is returned. Otherwise,
' True is returned.
' This functions is often used to check if the Domain Admin or Enterpise Admin
' group has no unexpected members.

On Error Resume Next

    Dim objGroup, objUser
    Dim bMemberFound, arrUsers, i

    VerifyGroupMembers = False

    Set objGroup = GetObject("WinNT://" & strDomain & "/" & strGroup & ",group")
    If( Err.Number <> 0 ) Then
        VerifyGroupMembers = retvalUnknown
        EXPLANATION = "Domain or group not found"
        Exit Function
    End If

    arrUsers = Split( strMemberList, "," )
    
    For Each objUser In objGroup.Members

        If( Err.Number <> 0 ) Then
            VerifyGroupMembers = retvalUnknown
            EXPLANATION = "Unable to list group members"
            Exit Function
        End If

        bMemberFound = False
              
        For i = 0 To UBound( arrUsers )
            If( UCase( Trim( arrUsers(i) ) ) = UCase( Trim( objUser.Name ) ) ) Then
                bMemberFound = True
                Exit For
            End If
    	Next
    	
    	If( Not bMemberFound ) Then
    	    VerifyGroupMembers = False
            EXPLANATION = "User '" & objUser.Name & "' is not allowed to be member of group '" & strGroup & "'"
    	    Exit Function
    	End If
    Next
    
    VerifyGroupMembers = True
    EXPLANATION = "All members of group '" & strGroup & "' are allowed members"
End Function