Is it possible to get the AD user group to which an Access user belongs??

[tlyczko]

I am developing an Access database that will be used by some users
logging into Citrix servers.

Using the "Code 1" listing, 'fGetFullNameOfLoggedUser' from Dev
Ashish's site, which I found in this thread:

http://groups.google.com/group/comp....aeea7d08d31849
subject: Question about 'fGetFullNameOfLoggedUser'

I implemented this as the control source of a simple text box, and it
worked successfully in my first trial.

Is there any code on this list which will have Access tell me the user
group(s) to which a user belongs??

It's a typical MS domain controller and typical Citrix farm setup.

Or even use the fGetUserName() code part to know what user group
someone is in??

Thank you, Tom

[Jeremy Wallace]

Tom,

There's code to do that in the MS Access Security White Paper. You can
find that floating around on the MS site, or at my old website
http://www.abcdataworks.com in the Developers section.

Jeremy
--
Jeremy Wallace
Fund for the City of New York

[tlyczko]

Thank you...I am hoping not to use Access security to not have to use
logins etc.
I may just have to start with Access for initial development/testing,
then move it to SQL Server and use Windows Auth etc.
I'm waiting for my copy of Baron and Chipman (I think they are the
authors) to figure out whether I can or cannot use an MDB front end to
SQL 2000.]
Thank you, and to anyone else who offers their suggestions.
Thank you, Tom

[David W. Fenton]

"tlyczko" <tl*****@gmail.com> wrote in
news:11**********************@g14g2000cwa.googlegr oups.com:

I am developing an Access database that will be used by some users
logging into Citrix servers.

Using the "Code 1" listing, 'fGetFullNameOfLoggedUser' from Dev
Ashish's site, which I found in this thread:

http://groups.google.com/group/comp....ss/browse_thre
ad/thread/9ba1a9bc7ebc270e/36aeea7d08d31849#36aeea7d08d31849
subject: Question about 'fGetFullNameOfLoggedUser'

I implemented this as the control source of a simple text box, and
it worked successfully in my first trial.

Is there any code on this list which will have Access tell me the
user group(s) to which a user belongs??

It's a typical MS domain controller and typical Citrix farm setup.

Or even use the fGetUserName() code part to know what user group
someone is in??

There is an API for getting Active Directory information, but I was
never ever able to figure out how to get the organizational unit
information out of it. I have an application where I would have used
that, but I couldn't figure it out, so instead manually replicated
the OU membership in Jet security. I just didn't have time to figure
out the Active Directory methods and am not sure that the OU
information is even available through the APIs at all. Surely it is,
since the AD tools can display it, but I couldn't for the life of me
figure out how.

And, at this point, I've lost the URLs to the MSDN articles
describing how it is done.

--
David W. Fenton http://www.dfenton.com/
usenet at dfenton dot com http://www.dfenton.com/DFA/

[David W. Fenton]

"Jeremy Wallace" <je************@gmail.com> wrote in
news:11**********************@f14g2000cwb.googlegr oups.com:

There's code to do that in the MS Access Security White Paper. You
can find that floating around on the MS site, or at my old website
http://www.abcdataworks.com in the Developers section.

Jeremy, I think you missed the significance of "AD" in the subject
-- he's looking for Active Directory user groups (and probably
organizational units, which are in AD only, and not part of NTFS
security, which has only users and groups).

--
David W. Fenton http://www.dfenton.com/
usenet at dfenton dot com http://www.dfenton.com/DFA/

[Jeremy Wallace]

Yup. I wondered what it was for a second. I think I even came up with
some answer to satisfy myself that my knee-jerk reaction was right
(though I certainly can't remember what that was), and then I answered
based on my assumptions, not his actual request.

Sorry, Tom. I can't help you with Active Directory stuff.

Jeremy
--
Jeremy Wallace
Fund for the City of New York

[tlyczko]

I'm only looking for AD user groups, not OU organizational unit stuff,
but the NTFS security stuff, so I can say based on their AD user group
membership they can or cannot see or do things in the FE.

Thank you, Tom

[David W. Fenton]

"tlyczko" <tl*****@gmail.com> wrote in
news:11**********************@f14g2000cwb.googlegr oups.com:

I'm only looking for AD user groups, not OU organizational unit
stuff, but the NTFS security stuff, so I can say based on their AD
user group membership they can or cannot see or do things in the
FE.

The AD user groups are identical to the NTFS user groups, so the
functions for this at that Access Web (mvps.org/access) should do
the job.

If you don't believe me, compare the AD group listings to the actual
user groups on your domain controller. Test the code. You'll find
that the only difference is in the organization.

--
David W. Fenton http://www.dfenton.com/
usenet at dfenton dot com http://www.dfenton.com/DFA/

[tlyczko]

Hello David,

I'm sure you're right, and I looked at the entire list of API items on
the mvps.org/access site, but didn't find anything about user groups in
there, I looked at the code for enumerating user accounts and getting
the login ID and getting the full name.

Unless I missed something and did not look in the right place, I don't
know.

I'll try Googling that site.

Thank you, Tom