Hi, Ed - 

It appears that you and David are doubling up on this question (which really isn't necessary, by the way), so I will repeat this response in the other thread.

I've never called this WinAPI function before, but in looking at the Windows documentation, it looks like it can be called with null arguments, and this affects how the function is called from PB. Therefore, I have a couple of questions:

1. Are you wanting to run this function on the local server (where the app is running) or on a remote (non-local) server?

2. Are you wanting only the names of the groups (the GROUP_USER_INFO_0 structure) or the names and attribute flags (the GROUP_USER_INFO_1 structure)?

I'm willing to try and figure out how to get the information into a PB app once I hear back from you, but please know that I have a limited amount of free time at home in the evening in which to tackle this, as my employer understandably does not want to pay me for working on other people's problems. Once I hear back from either/both of you, I'll see what I can come up with.

Best regards, John

Hi Ed

   My STD Framework has all the AD interaction capabilities built in. Here is a presentation that I gave at a PB conference that explains how it works...

https://sourceforge.net/projects/stdfndclass/files/Presentations/Active%20Directory

HTH: the framework is free & open source so please adapt any code that helps you in this quest.

Regards... Chris

Hi John,

Thanks for your response. I didn't realize David asked the same question until after I posted mine.

All we want to do is verify AD access before they can run the application.

So user 'A' belongs to AD group 'App A access'

When we start the client app, the 1st thing we want to verify is that user 'A' is in AD group 'App A access'. If they do, they can run the app, if not, they get kicked out.

I was just looking for some mechanism to see which AD groups a user has access. The alternative, is to look at the members of a group and see if the user belongs to it.

Any ideas would be appreciated. I believe in the worse case, I can call a CMD file from the PB code and run a command like:

            net user ev51606 /domain

If I pipe the results to a text file, I can look for the ID within the results. But I was hoping for a better way via a DLL call or some other process.

Thanks,

Ed