How can we differentiate users exists in particular group of Active Directory

Question

My requirement in one of my projects is like, I have 2 Active Directory Groups say Team Group and HR group and members(users) total of 25. So I have to differentiate those 25 users in under which group will go. This I have to do in SharePoint 2010. Can anyone get me out of this problem?

Answer 1

It sounds like you want to use the user's domain username to see if that user is a member of a specific active directory group or not. This can be easily done using a C# function such as the one posted here by Nick (.net 3.5 referencing System.DirectoryServices.AccountManagement):

public List<string> GetGroupNames(string userName)
{
  var pc = new PrincipalContext(ContextType.Domain);
  var src = UserPrincipal.FindByIdentity(pc, userName).GetGroups(pc);
  var result = new List<string>();
  src.ToList().ForEach(sr => result.Add(sr.SamAccountName));
  return result;
}

You can then loop through all groups a user belongs to in order to determine if a user belongs to a specific group or not.

Pete

Answer 2

Active director security groups can be used in SharePoint groups. So you'd just want to add the specific AD security group to corresponding SharePoint groups. Then you can do any access and permissions you need from that point on to the SharePoint content.