Re: Problem retrieving all security groups for user in Active Directory

From: Joe Kaplan \(MVP - ADSI\) (joseph.e.kaplan_at_removethis.accenture.com)
Date: 01/17/05


Date: Sun, 16 Jan 2005 23:47:22 -0600

Can you say more about the groups that are missing? Are they all from the
same domain? If there is nesting involved, are all of the groups in the
chain marked with the security-enabled flag?

You might also consider some unmanaged code to inspect the token to see what
SIDs are in it, but I expect it to be the same.

Joe K.

<kent.anderson@gmail.com> wrote in message
news:1105936817.235859.52890@z14g2000cwz.googlegroups.com...
> Hello
> I am currently trying to retrieve all security groups from active
> directory for the logged in user on an ASP.Net page using C#. I am
> using refection to do this. The following code will return some of
> the security groups but not all:
>
> MethodInfo getroles = typeof(WindowsIdentity).GetMethod("GetRoles",
> BindingFlags.Instance | BindingFlags.NonPublic);
> string[] roles = (string[])getroles.Invoke(windowsPrincipal.Identity,
> null);
>
> The page is currently set to anonymous access with impersonation turned
> on. I also tried the whoami /groups command under the user's security
> context and retrieved the same list. Why would some of the security
> groups show and others not?
>



Relevant Pages

  • [NT] WinGate Information Disclosure Vulnerability
    ... Get your security news from a reliable source. ... validation vulnerability in Qbik WinGate allows attackers to retrieve ... 06/23/04 Initial vendor response ...
    (Securiteam)
  • [UNIX] Sharity Cifslogin Buffer Overflow (Arguments)
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Sharity supports browsing (like ... users to overwrite arbitrary files and devices, patch number PHNE_24164. ... Please read it, retrieve the patch, and apply it to your Lab02 11.11 ...
    (Securiteam)
  • Re: Retrieve / list members of Sysadmin role without connecting to the SQL-server (API? Please help!
    ... I'm not too sure about that as I'm able to retrieve Windows ... account-information from a system through an anonymous account which ... Baseline Security Analyzer) does, ... so you have to log on to SQL Server to be able to retrieve them. ...
    (microsoft.public.sqlserver.programming)
  • RE: putting username in a msgbox
    ... Security it would be ... If you are trying to retrieve the Windows User name see the following ... How to Retrieve Workgroup Information Under Win32 ... Microsoft Access Support ...
    (microsoft.public.access.macros)
  • Re: Where to store id/password on the net?
    ... locked into a security case). ... >That way I could tell my wife over the phone how to retrieve data, ... This can happen at the hardware, software, or network level. ... "high-value" target and the cost of compromise is potentially ...
    (comp.security.misc)