Comments on: Possible VB2008 BUG: My.User.IsInRole (When UAC ON) http://markmonica.com/2009/10/29/possible-vb2008-bug-my-user-isinrole-when-uac-on/ Contributing to the vast web, 1 blog post at a time - blogs by Mark Monica Tue, 09 Mar 2010 21:47:55 +0000 hourly 1 http://wordpress.org/?v=3.0.1 By: Steve Froebel http://markmonica.com/2009/10/29/possible-vb2008-bug-my-user-isinrole-when-uac-on/comment-page-1/#comment-483 Steve Froebel Tue, 09 Mar 2010 21:47:55 +0000 http://markmonica.com/2009/10/29/possible-vb2008-bug-my-user-isinrole-when-uac-on/#comment-483 My VB app worked file in XP and win2k3 authorizing users based on AD groups. I switched my development workstation to Win 7. Now I am never authorized by the app. I am worried that when we switch our servers to 2008 the same thing will happen in production. My original VB code is similer to your "workaround". I tried using the IsInRole approach as a workaround. Neither works because it looks like they both get group memberships from the same place. Tracing the code I can see 56 groups returned, but they are not my groups - I have less than a dozen memberships. The returned groups are a subset of the groups defined in my AD. Unless I missed a reference in VS, it looks like a bug to me. My VB app worked file in XP and win2k3 authorizing users based on AD groups. I switched my development workstation to Win 7. Now I am never authorized by the app. I am worried that when we switch our servers to 2008 the same thing will happen in production.

My original VB code is similer to your “workaround”. I tried using the IsInRole approach as a workaround.

Neither works because it looks like they both get group memberships from the same place.

Tracing the code I can see 56 groups returned, but they are not my groups – I have less than a dozen memberships. The returned groups are a subset of the groups defined in my AD.

Unless I missed a reference in VS, it looks like a bug to me.

]]>