Check user exists in AD group or not

Hi,

Refer below code,

public class UserManager {
// Checking whether the current user is a member of a specified
// Sharepoint group
public bool IsCurrentUserInRole(string SharepointGroupName) {
bool flag = false;
try {
string strUsername = SPContext.Current.Web.CurrentUser.LoginName;
string webUrl = SPContext.Current.Web.Url;
// Check the role of user return CheckRole(username, userrole, webUrl);
} catch (Exception ex) {
// log the error
}
return flag;
}
// First Check the role of user in share point groups
private bool CheckRole(string username, string userrole, string webUrl) {
if (IsUserInSharePointGroup(webUrl, userrole, username))
return true;
else
return false;
}
public bool IsUserInSharePointGroup(string webUrl, string groupName, string username) {
bool reachedMax = false;
bool userIsInGroup = false;
// return false if there are invalid inputs
if (String.IsNullOrEmpty(username) || String.IsNullOrEmpty(groupName))
return false;
// The Run with elevated privileges needs read permission
// on active directory and the ability to run directory code.
SPSecurity.RunWithElevatedPrivileges(delegate {
try {
// Get the Site Collection
using(SPSite site = new SPSite(webUrl)) {
// Get the web
using(SPWeb web = site.OpenWeb()) {
// Find the group
SPGroup group = site.RootWeb.SiteGroups[groupName];
string upperCaseUserName = username.ToUpper();
// Get ad users in the groups. Since MOSS does
// not support nested groups
// this will always be a collection of AD users
// and groups
foreach(SPUser user in group.Users) {
// Check if this is a Group
if (!user.IsDomainGroup) {
// Verify if the user name matches the user name in group
if (user.LoginName.ToUpper().Equals(upperCaseUserName)) {
// if a match is confirmed, return from the method.
// There is no need to continue
userIsInGroup = true;
return;
}
} else {
// If the AD entity is a User Group,
// then check for users in that group
if (IsUserInADGroup(web, user.LoginName, username, out reachedMax)) {
userIsInGroup = true;
return;
}
}
}
}
}
} catch (Exception ex) {
//Trace error
}
});
return userIsInGroup;
}
private static bool IsUserInADGroup(SPWeb web, string groupName, string username, out bool reachedMax) {
// SPUtility call to get principals in the group
SPPrincipalInfo[] principals = SPUtility.GetPrincipalsInGroup(web, groupName, 500, out reachedMax);
// If no principals found then indicate the same
if (principals == null || principals.Length == 0) {
return false;
} else {
// Loop through principals
string upperCaseUserName = username.ToUpper();
foreach(SPPrincipalInfo principal in principals) {
//TODO: Determine which principal.PrincipalType to ignore
// Check if the principal is a valid user
// and if so check to see if it is
//the one we are looking for
if (!principal.IsSharePointGroup && principal.PrincipalType != SPPrincipalType.SecurityGroup && principal.DisplayName.ToUpper() != "SYSTEM ACCOUNT") {
// Check if the user matches the user we are looking for
if (principal.LoginName.ToUpper() == upperCaseUserName) {
return true;
}
}
// If Principal is a Security Group (AD Group) then recurse through it
else if (principal.PrincipalType == SPPrincipalType.SecurityGroup) {
// Check for users in the security groups
if (IsUserInADGroup(web, principal.LoginName, username, out reachedMax)) {
return true;
}
}
}
return false;
}
}
}

Here you will only need to call "IsCurrentUserInRole(string SPGroupName)" method by passing the Sharepoint group name to check whether the current user exists in the specified Sharepoint group and returns true if user exists, otherwise return false.

Please check this url and Code

https://sharepoint.stackexchange.com/questions/60516/how-to-check-if-current-user-is-exist-in-a-ad-group-inside-a-sharepoint-group

First you can get the identity of the user which you want to know, then use the user’s token to log into the SharePoint, finally call SPGroup.ContainsCurrentUser for that user. The code is as follows:

using(SPWeb web=site.OpenWeb())
{
user=web.EnsureUser("domain\\username");
}
using (SPSite site1 = new SPSite("http://site/",user.UserToken))

In addition to that, you can also use SPWeb.IsCurrentUserMemberOfGroup to know whether the current user is a member of the specified group.

For more information about SPWeb.IsCurrentUserMemberOfGroup Method, please refer to the following articles:

http://msdn.microsoft.com/en-us/library/microsoft.sharepoint.spweb.iscurrentusermemberofgroup.aspx

http://fabioscagliola.spaces.live.com/blog/cns!919F8FCDE3DC9AC4!195.entry

https://social.technet.microsoft.com/Forums/en-US/325434cc-3ff7-48b1-a110-2d4cacc8eb93/check-user-existence-in-ad-group-which-was-added-in-sp-group?forum=sharepointadminprevious

2 Replies

Know the answer? Post it — somebody with the same question will find it here.

Ronika Jency6y ago
Accepted answer
Hi,

Refer below code,
public class UserManager {
// Checking whether the current user is a member of a specified
// Sharepoint group
public bool IsCurrentUserInRole(string SharepointGroupName) {
  bool flag = false;
  try {
   string strUsername = SPContext.Current.Web.CurrentUser.LoginName;
   string webUrl = SPContext.Current.Web.Url;
   // Check the role of user return CheckRole(username, userrole, webUrl);
  } catch (Exception ex) {
   // log the error
  }
  return flag;
}
// First Check the role of user in share point groups
private bool CheckRole(string username, string userrole, string webUrl) {
  if (IsUserInSharePointGroup(webUrl, userrole, username))
   return true;
  else
   return false;
}
public bool IsUserInSharePointGroup(string webUrl, string groupName, string username) {
  bool reachedMax = false;
  bool userIsInGroup = false;
  // return false if there are invalid inputs
  if (String.IsNullOrEmpty(username) || String.IsNullOrEmpty(groupName))
   return false;
  // The Run with elevated privileges needs read permission
  // on active directory and the ability to run directory code.
  SPSecurity.RunWithElevatedPrivileges(delegate {
   try {
    // Get the Site Collection
    using(SPSite site = new SPSite(webUrl)) {
     // Get the web
     using(SPWeb web = site.OpenWeb()) {
      // Find the group
      SPGroup group = site.RootWeb.SiteGroups[groupName];
      string upperCaseUserName = username.ToUpper();
      // Get ad users in the groups. Since MOSS does
      // not support nested groups
      // this will always be a collection of AD users
      // and groups
      foreach(SPUser user in group.Users) {
       // Check if this is a Group
       if (!user.IsDomainGroup) {
        // Verify if the user name matches the user name in group
        if (user.LoginName.ToUpper().Equals(upperCaseUserName)) {
         // if a match is confirmed, return from the method.
         // There is no need to continue
         userIsInGroup = true;
         return;
        }
       } else {
        // If the AD entity is a User Group,
        // then check for users in that group
        if (IsUserInADGroup(web, user.LoginName, username, out reachedMax)) {
         userIsInGroup = true;
         return;
        }
       }
      }
     }
    }
   } catch (Exception ex) {
    //Trace error
   }
  });
  return userIsInGroup;
}
private static bool IsUserInADGroup(SPWeb web, string groupName, string username, out bool reachedMax) {
  // SPUtility call to get principals in the group
  SPPrincipalInfo[] principals = SPUtility.GetPrincipalsInGroup(web, groupName, 500, out reachedMax);
  // If no principals found then indicate the same
  if (principals == null || principals.Length == 0) {
   return false;
  } else {
   // Loop through principals
   string upperCaseUserName = username.ToUpper();
   foreach(SPPrincipalInfo principal in principals) {
    //TODO: Determine which principal.PrincipalType to ignore
    // Check if the principal is a valid user
    // and if so check to see if it is
    //the one we are looking for
    if (!principal.IsSharePointGroup && principal.PrincipalType != SPPrincipalType.SecurityGroup && principal.DisplayName.ToUpper() != "SYSTEM ACCOUNT") {
     // Check if the user matches the user we are looking for
     if (principal.LoginName.ToUpper() == upperCaseUserName) {
      return true;
     }
    }
    // If Principal is a Security Group (AD Group) then recurse through it
    else if (principal.PrincipalType == SPPrincipalType.SecurityGroup) {
     // Check for users in the security groups
     if (IsUserInADGroup(web, principal.LoginName, username, out reachedMax)) {
      return true;
     }
    }
   }
   return false;
  }
}
}
Here you will only need to call "IsCurrentUserInRole(string SPGroupName)" method by passing the Sharepoint group name to check whether the current user exists in the specified Sharepoint group and returns true if user exists, otherwise return false.
0
Dinesh Gabhane6y ago
Please check this url and Code

https://sharepoint.stackexchange.com/questions/60516/how-to-check-if-current-user-is-exist-in-a-ad-group-inside-a-sharepoint-group
First you can get the identity of the user which you want to know, then use the user’s token to log into the SharePoint, finally call SPGroup.ContainsCurrentUser for that user. The code is as follows:
using(SPWeb web=site.OpenWeb())
{
user=web.EnsureUser("domain\\username");
}
using (SPSite site1 = new SPSite("http://site/",user.UserToken))
In addition to that, you can also use SPWeb.IsCurrentUserMemberOfGroup to know whether the current user is a member of the specified group.
For more information about SPWeb.IsCurrentUserMemberOfGroup Method, please refer to the following articles:
http://msdn.microsoft.com/en-us/library/microsoft.sharepoint.spweb.iscurrentusermemberofgroup.aspx
http://fabioscagliola.spaces.live.com/blog/cns!919F8FCDE3DC9AC4!195.entry
https://social.technet.microsoft.com/Forums/en-US/325434cc-3ff7-48b1-a110-2d4cacc8eb93/check-user-existence-in-ad-group-which-was-added-in-sp-group?forum=sharepointadminprevious
0