Question

I want to make a function to determine if a user, whose ID is passed with parameter, is an admin. I am able to do this for the currently logged in user with –

        public static bool IsAuthorizedUser()
    {

        WindowsIdentity identity = WindowsIdentity.GetCurrent(); 
        WindowsPrincipal principal = new WindowsPrincipal(identity); 
        return principal.IsInRole(WindowsBuiltInRole.Administrator); 
    }

but I want to check any user passed in. So the signature would change to

public static bool IsAuthorizedUser(string username_to_check) 

How can I do this? Any help is appreciated.

Answer 1

I was able to get it working how I wanted with UserPrincipal. Thanks for the all of the feedback.

 public static bool IsAuthorizedUser(string userId) 
 {
     PrincipalContext ctx = new PrincipalContext(ContextType.Machine);
     UserPrincipal usr = UserPrincipal.FindByIdentity(ctx, IdentityType.SamAccountName, userId);

     bool result = false;
     if(usr == null)
     {
         Console.WriteLine("usr is null");
     }
     else
     {
         foreach (Principal p in usr.GetAuthorizationGroups())
         {
             if (p.ToString() == "Administrators")
             {
                 result = true;
             }
         }
      }
      return result;
    }