PowerShell Script: How to query a current logon user in part of E.G AD group domain1\Group1 ?

Question

Hi Scripts guys,
I am new to powershell . I would like to achieve the following :
1. to check e.g if current logon user is member of .e.g. to domain1\group1
if yes then execute another
a. do a subst of a: to d:
b. follow by executing the 2nd cmd e.g execute.ps1  
else exit and
proceed with execute.ps1
please advice how best to achieve this ? Thanks in advance for your help :)

Answer 1

When testing the "current user" for group memberships, I prefer to do it locally using the user's logon token rather than having to query the directory. This has the advantage of automatically dealing with nested group memberships, and working
with local / builtin groups as well. Something along these lines:
function Test-CurrentUserIsMember
[CmdletBinding()]
param (
[Parameter(Mandatory = $true)]
$Group
$sid = $Group -as [System.Security.Principal.SecurityIdentifier]
if ($null -eq $sid)
$account = $Group
if ($account -isnot [System.Security.Principal.IdentityReference])
$account = [System.Security.Principal.NTAccount][string]$Group
try
$sid = $account.Translate([System.Security.Principal.SecurityIdentifier])
catch
throw "Group '$Group' could not be resolved to a Security Identifier"
return ([System.Security.Principal.WindowsIdentity]::GetCurrent().Groups -contains $sid)
if (Test-CurrentUserIsMember -Group 'DOMAIN1\Group1')
# User is a member of the group (directly, or via nested group memberships.)
Write-Host "Is Member"
else
# User is not a member of the group.
Write-Host "Is Not Member"