Powershell Script to connect AD and check if the user is member of a group or not from client

Question

question

FahadNoaman-7438 asked Apr 12, '21 BradleyJL-5019 published Jan 14, '22

Powershell Script to connect AD and check if the user is member of a group or not from client

Can you help me to create a Powershell Script to connect AD and check if the user is member of a group or not from client machine and set a registery key based on the condition

windows-server windows-server-powershell

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

BradleyJL-5019 · Jan 14 at 05:41 PM

Maybe this:

$username=$env:username
IF (([adsisearcher]"(samaccountname=$UserName)").FindOne().Properties.memberof -match "CN=YourADGroup" ){New-ItemProperty -Path "HKCU:RegistryKeyPath" -Name "RegistryKeyName" -Value "RegistryValue" -Force | Out-Null}

0 ·

Answer 1 · 2021-04-13T04:55:27.213Z

IanXue-MSFT answered Apr 13, '21 IanXue-MSFT edited Apr 14, '21

Hi,

The PowerShell AD module has to be installed first.
https://4sysops.com/wiki/how-to-install-the-powershell-active-directory-module/

Then you check the user like this

 $username = 'user1'
 $group = 'group1'
 $user = Get-ADGroupMember -Identity $group | Where-Object {$_.name -eq $username}
 if($user){
     Write-Host 'member found'
 }
 else{
     Write-Host 'member not found'
 }

Best Regards,
Ian Xue
============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

· 2

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

FahadNoaman-7438 · Apr 13, 2021 at 08:29 AM

Hi Lan,

Thanks for the prompt reply.

however am looking for a script to create a registry key on the client machine depending on the membership of user of the security group.

script has to run as a logon script from client machine, user will have only domain user permission, the above script runs only if the user has read permission on ad

Thanks in advanced.

0 ·

IanXue-MSFT FahadNoaman-7438 · Apr 14, 2021 at 06:31 AM

If the user doesn't have the read permission on the group, you have to run the script as some other user with the permission.
To create a registry key you can use the New-Item cmdlet
https://devblogs.microsoft.com/scripting/use-powershell-to-easily-create-new-registry-keys/

1 ·

question