IFMEMBER – Windows CMD Command

Find out if the current user is a member of one or more groups.

Syntax
      IFMEMBER [options] Group [ Group2 Group3...]

Options:
        /verbose or /v   : print all matches.
        /list    or /l   : print all groups user is a member of

The %ERRORLEVEL% return code shows how many of the listed groups the currently logged-in user is a member of.

To also test for nested permissions use VBScript or PowerShell Get-adGroupMember.

Examples

IFMEMBER /v /l "MyDomain\Administrators"
IF ERRORLEVEL 1 echo This user is an Administrator

Notice that the syntax here is the opposite to most other commands in that an %errorlevel% of 1 = Success

A good way to utilise IFMEMBER is through conditional execution...

IFMEMBER Administrators || ECHO Error is 1 so [%Username%] is an Admin

IFMEMBER Administrators && ECHO Error is 0 so [%Username%] is NOT an Admin