Find out if the current user is a member of one or more groups.
Syntax
IFMEMBER [options] Group [ Group2 Group3...]
Options:
/verbose or /v : print all matches.
/list or /l : print all groups user is a member of
The %ERRORLEVEL% return code shows how many of the listed groups the currently logged-in user is a member of.
To also test for nested permissions use VBScript or PowerShell Get-adGroupMember.
Examples
IFMEMBER /v /l "MyDomain\Administrators"
IF ERRORLEVEL 1 echo This user is an Administrator
Notice that the syntax here is the opposite to most other commands in that an %errorlevel% of 1 = Success
A good way to utilise IFMEMBER is through conditional execution...
IFMEMBER Administrators || ECHO Error is 1 so [%Username%] is an Admin
IFMEMBER Administrators && ECHO Error is 0 so [%Username%] is NOT an
Admin
“The euro will raise the citizens' awareness of their belonging to one Europe more than any other integration step to date” ~ Gerhard Schroeder
Related:
NET GROUP - Add or remove a user from a group.
Joeware.net - MemberOf.exe - Like
IFMEMBER but able to handle nested AD groups.