# Locating a User's Group Memberships

When using Active Directory, you can identify the group to which a user belongs by defining a custom user field.

For example, if you want to verify that a user is part of the "Vision Software" active directory group, do the following:

1. In the Explorer pane, double-click System > Users. The User Configuration dialog box opens.

2. In the User Configuration dialog box, in the Authentication Mode drop-down box, select Active Directory.

3. Click Configure The Parameter Configuration dialog box opens.

4. Enter the domain name you are configuring in the Domain field. Select Local Fallback if applicable. Click Accept.

5. Click Define User Properties. The User Field Editor opens.
6. Click the plus (+) icon to add a new line.
7. Enter IsMemberOfVision_Software in the Name field. Any non-alphabetic character entered in the Name field will be removed.
8. Enter boolean in the Data Type field.
9. Enter false in the Default Value field.
10. Click Save.

You can now bind to the $System.Users.IsMemberOfVision_Software tag to see whether the currently logged-in user belongs to the 'Vision Software' group.

Tip: To list all groups the current logged-in user belongs to, run the following Windows PowerShell script. Each group will be listed on a separate line in the output. (New-Object System.DirectoryServices.DirectorySearcher("(&(objectCategory=User)(samAccountName=$($env:username)))")).FindOne().GetDirectoryEntry().memberOf