Once we have the group CN we then add that group to our Dictionary object, using the group CN as both the Dictionary key and the Dictionary item:<\/P>
objDictionary.Add strGroupName, strGroupName\n<\/PRE>\nWhat\u2019s the point of all that? Try to be patient for another minute; we\u2019re almost ready to talk about the details of the Dictionary object.<\/P>\n
Before we do that, however, let\u2019s finish talking about the For Each loop. After we\u2019ve added the first group to the Dictionary we loop around and repeat the process with the next group in the collection. When we\u2019re all done, we\u2019ll have a Dictionary object that contains a list of all the groups that the user belongs to.<\/P>\n
So why do<\/I> we need to have all the groups in a Dictionary object? That\u2019s easy: we can\u2019t really start mapping drives until we have a list of all the groups that the user belongs to. Why not? Well, suppose we\u2019re in the For Each loop and we discover that the user is a member of the Finance Consultants group. If we wanted to, we could go ahead and map drive X based on the user\u2019s membership in Finance Consultants. However, that\u2019s going to cause a problem if it turns out that the user is also a member of the Finance Users group. <\/P>\n
To help avoid that problem, we decided to grab all the group names and put them in a Dictionary object. After the groups are safely tucked away like that we can then use the Dictionary object\u2019s Exists<\/B> method to determine whether the user is a member of a particular group. Equally important, we can check for group membership using the order of precedence.<\/P>\n
In other words, that\u2019s what this block of code is for:<\/P>
If objDictionary.Exists(“Finance Managers”) Then\n objNetwork.MapNetworkDrive “X:”, “\\\\atl-fs-001\\public\\managers”\n Wscript.Quit\nEnd If\n<\/PRE>\nWhat we\u2019re doing here is checking to see if the string value Finance Managers<\/I> appears in our Dictionary. If it doesn\u2019t, that means that the user is not a member of Finance Managers. In that case we then skip down to the next block of code, which checks to see if the user is a member of Finance Users. (Note that we\u2019re following the order of precedence: we\u2019re checking for membership in Finance Managers before we check for membership in any other groups.)<\/P>\n
Let\u2019s assume that the value Finance Managers<\/I> actually does<\/I> appear in the Dictionary. That can mean only one thing: the user is a member of the Finance Managers group. In turn, we then use this line of code to map drive X to the share \\\\atl-fs-001\\public\\managers:<\/P>objNetwork.MapNetworkDrive “X:”, “\\\\atl-fs-001\\public\\managers”\n<\/PRE>\nFrom there we call the Wscript.Quit<\/B> method to terminate the script. Why? Because the Finance Managers group takes precedence over any other group. In other words, once we\u2019ve determined that the user is a member of Finance Managers there\u2019s no reason to keep going; after we map a drive to \\\\atl-fs-001\\public\\managers we\u2019re done. Notice that we also use Wscript.Quit in our next block of code:<\/P>If objDictionary.Exists(“Finance Users”) Then\n objNetwork.MapNetworkDrive “X:”, “\\\\atl-fs-001\\public\\users”\n Wscript.Quit\nEnd If\n<\/PRE>\nWhy? You got it: If the user is a member of Finance Users then we don\u2019t care whether they also belong to Finance Planners or Finance Consultants. That\u2019s because membership in Finance Users takes precedence over membership in those other two groups. Consequently, we map the drive and then terminate the script.<\/P>\n
Etc., etc.<\/P>\n
What if you needed to check for membership in 10 different groups? Just keep adding on these If Then blocks, making sure that you check for groups in order of precedence.<\/P>\n
We hope that answers your \u2026 question \u2026 SE. And we hope you\u2019ll begin to cut the Scripting Guy who writes this column a little slack, at least when it comes to making promises. After all, you know what Nikita Khrushchev once said about promises:<\/P>\n
\n<\/THEAD>\n\n\n| \n If we were to promise people nothing better than only revolution, they would scratch their heads and say: \u201cIs it not better to have good goulash?\u201d<\/P><\/TD><\/TR><\/TBODY><\/TABLE>\n <\/DIV>\n We couldn\u2019t have said it better ourselves.<\/P>\n Speaking of goulash, did someone say that it\u2019s lunchtime? See you all tomorrow.<\/P><\/p>\n","protected":false},"excerpt":{"rendered":" Hey, Scripting Guy! In yesterday\u2019s column you showed a sample script that mapped a drive based on membership in an Active Directory group; along the way, you brought up the possibility of a user belonging to more than one group. \u201cSuppose you have two groups,\u201d you said. \u201cWhat happens if a user is a member […]<\/p>\n","protected":false},"author":595,"featured_media":87096,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[7,44,3,185,12,20,5],"class_list":["post-63433","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scripting","tag-active-directory","tag-groups","tag-scripting-guy","tag-shared-folders-and-mapped-drives","tag-storage","tag-user-accounts","tag-vbscript"],"acf":[],"blog_post_summary":" Hey, Scripting Guy! In yesterday\u2019s column you showed a sample script that mapped a drive based on membership in an Active Directory group; along the way, you brought up the possibility of a user belonging to more than one group. \u201cSuppose you have two groups,\u201d you said. \u201cWhat happens if a user is a member […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/63433","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/users\/595"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/comments?post=63433"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/63433\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media\/87096"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media?parent=63433"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/categories?post=63433"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/tags?post=63433"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}} |
![\"Hey,](\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/29\/2019\/02\/q-for-powertip.jpg\" "\\"Hey,")
<\/H2>\n![\"Spacer\"](\"https:\/\/devblogs.microsoft.com\/scripting\/wp-content\/uploads\/sites\/29\/2019\/05\/spacer.gif\")
![\"Hey,](\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/29\/2019\/02\/a-for-powertip.jpg\" "\\"Hey,")
![\"Script](\"http:\/\/img.microsoft.com\/library\/media\/1033\/technet\/images\/scriptcenter\/ad.jpg\" "\\"Script")
<\/A> \n