Home/ Questions/Q 8130777
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-06T08:50:59+00:00

I am using ASP.Net 4.0 MVC to query active directory. I am trying to

  • 0

I am using ASP.Net 4.0 MVC to query active directory. I am trying to get a list of a user’s group memberships and that iterate through them. I am having a weird problem. To get the groups I was using:

   PrincipalSearchResult<Principal> groups = up.GetGroups();

Which worked great on localhost but returns an empty set when moved to IIS6. So I tried using this:

    PrincipalSearchResult<Principal> groups = up.GetAuthorizationGroups();

Which worked great on IIS6 but returns an empty set on localhost. What is the difference between these 2 methods? Why can I use one in IIS6 and not on localhost? Why can I use the other one on localhost and not in IIS6?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    I assume GetAuthorizationGroups() calls in to tokenGroups in AD. To read that, your service account (or IIS machine account if Network Service) needs to be in the Windows Authorization Access group in AD.

    • 0