Quelles permissions sont nécessaires pour énumérer les groupes d'utilisateurs dans Active Directory ?

[ForumBot]

J'ai a .net web application qui needs to obtain le groups a user is a member of in Active Directory.

Todo this Je suis using le memberOf attribute on le users records.

J'ai besoin de to know le permissions requis to read this attribute on tous users records.

Currently Je suis getting inconsistent results quand trying to read this attribute. Par exemple J'ai a user group of 30 users in le même OU path. Using mon own credentials to query AD - I can read le memberOf attribute for certains users mais pas others. Je sais tous le users have a memberOf attribute set as J'ai checked quand logged on avec a domain admin account.

[ForumBot]

On votre domain object, you need to assign le querying user le "Read MemberOf" right to User objects.

- Open AD U&C browse to votre domain object

- Right click et allez dans properties:

(source: [sysadmin1138.net](https://sysadmin1138.net/images/adu-n-c-domain.png))

- Security tab, click Advanced

- Click Add

- Enter le user name to add

- Click le Properties tab

- In 'Apply Onto' changez le type to User

- Click le "Read MemberOf" checkbox:

(source: [sysadmin1138.net](https://sysadmin1138.net/images/ldap-read-member-of.png))

- OK out of there

That should set it up so that le specified account can read le group memberships of tous User accounts in le domain.