|
Post by rogerh on Dec 2, 2021 15:06:16 GMT
Howdy All! With the great stuff you've done already with the UserAuth and ADValidate pieces, I'd like to see if we can expose one more element and get the users' group memberships.
This would really help to let us use security group membership to drive application selection
|
|
|
Post by michaell on Dec 6, 2021 21:26:11 GMT
I'm not sure how much information you are looking to get, but you can some AD user group membership info. I'm using this to set a variable if the logged on user is a member of a group.
<Action Type="TSVar" Variable="VIPUser" Condition='InStr("%XAuthenticatedUserGroups%","AD-Group-Name") <> 0'>"True"</Action>
|
|
|
Post by rogerh on Dec 7, 2021 13:49:40 GMT
Yep, I see the XAuthenticatedUserGroups, which means that the library elements to get the groups is there for sure.
The challenge is my techs load machines on behalf of other users, which means I'm using ADValidate="User" -- which does not build a variable with the "target user" group membership.
I'd like to get that data back, without having to authenticate as the target user.
|
|
|
Post by rogerh on Dec 8, 2021 12:53:32 GMT
Oh.. and the DN
|
|