break on

$dom = "medomain"
$usr = "meaccount"

$objUsr = getobject("WinNT://" + $dom + "/" + $usr + "/,user")

$objUsr.PrimaryGroupID

get $

exit 0

Break On

$Dom = @LDomain
$usr = 'Guest'

$oWMIService = GetObject("winmgmts:root\cimv2")
$cItems = $oWMIService.ExecQuery("Select * from Win32_Group where LocalAccount = 0 And Name = 'domain users'")
For Each $oItem In $cItems
  $SID = $oItem.SID
Next

$SID = Left($SID,InStrRev($SID,'-')) ; Get Domain RID
$oUser = GetObject("WinNT://" + $Dom + "/"+ $usr + ",User")
$SID = $SID + $oUser.Get("primaryGroupID")

? 'Primary group name = ' + SidToName($SID)

Get $x

On Error Resume Next

Const E_ADS_PROPERTY_NOT_FOUND  = &h8000500D
 
Set objUser = GetObject _
    ("LDAP://cn=MyerKen,ou=Management,dc=NA,dc=fabrikam,dc=com")
intPrimaryGroupID = objUser.Get("primaryGroupID")
 
Set objConnection = CreateObject("ADODB.Connection")
objConnection.Open "Provider=ADsDSOObject;"
Set objCommand = CreateObject("ADODB.Command")
objCommand.ActiveConnection = objConnection
objCommand.CommandText = _
    "<LDAP://dc=NA,dc=fabrikam,dc=com>;(objectCategory=Group);" & _
        "distinguishedName,primaryGroupToken;subtree"  
Set objRecordSet = objCommand.Execute
  
Do Until objRecordset.EOF
    If objRecordset.Fields("primaryGroupToken") = intPrimaryGroupID Then
        WScript.Echo "Primary group:"
        WScript.Echo objRecordset.Fields("distinguishedName") & _
            " (primaryGroupID: " & intPrimaryGroupID & ")"
    End If
    objRecordset.MoveNext
Loop
 
objConnection.Close

$Dom = @LDomain
$usr = 'guest'
 
$oUser = GetObject("WinNT://" + $Dom + "/"+ $usr + ",User" )
$RID = $oUser.Get("primaryGroupID")
$PriName = GetGroupNameFromRID($RID)
If Not @Error
	'Primary group name: ' + $PriName
EndIf
 
Function GetGroupNameFromRID($RID)
	Dim $oConnection,$oCommand,$oRootDSE
	$oConnection = CreateObject("ADODB.Connection")
	$oConnection.Open("Provider=ADsDSOObject;")
	$oCommand = CreateObject("ADODB.Command")
	$oCommand.ActiveConnection = $oConnection
	$oRootDSE = GetObject("LDAP://RootDSE")
	$oCommand.CommandText = "<LDAP://" + $oRootDSE.Get("defaultNamingContext") + ">;(objectCategory=Group);Name,primaryGroupToken;subtree"  
	$oRecSet = $oCommand.Execute
	While Not ($oRecSet.EOF Or $GetGroupNameFromRID)
	    If $oRecSet.Fields("primaryGroupToken") = $RID
	        $GetGroupNameFromRID = CStr($oRecSet.Fields("Name"))
	    EndIf
	    $oRecSet.MoveNext
	Loop
	$oConnection.Close
	Exit VarType($GetGroupNameFromRID) = 0
EndFunction

break on



$CurDomain = @ldomain



while $x <> "q"

    cls

    at(10, 2) "Enter Username..."

    at(12, 3) gets $x

    at(13, 3) "Primary Group = " + ADS_GetPrimaryGroup($x)

    at(15, 5) "Q = Quit, any key = next" get $x

loop



exit 0







function ADS_GetPrimaryGroup($usr)

    dim $root, $group, $PrimaryRID, $SID, $tmp, $i

    $root = getobject("WinNT://" + $CurDomain + "/" + $usr + ",user")

    if not @error

        $PrimaryRID = $root.PrimaryGroupID

        for each $group in $root.Groups

            $SID = udfBytes2Array($group.Get("objectSID"))

            for $i = ubound($sid) to ubound($sid)-3 step -1

                $tmp = $tmp + dectohex(val($sid[$i]) / 16) + dectohex(val($sid[$i]) & 15)

            next

            if $PrimaryRID = HexToDec($tmp)

                $ADS_GetPrimaryGroup = $group.Name

                exit 0

            endif

        next

    endif

endfunction



function HexToDec($Hex)

    dim $HexArr, $Fac, $L, $Ch, $nb

    $HexArr = "0","1","2","3","4","5","6","7","8","9","A","B","C","D","E","F"," "

    If $Hex > "7FFFFFFF"

        exit 87

    EndIf

    $HexToDec = 0

    $Fac = 1

    for $L = len($Hex) to 1 step -1

        $Ch = substr($Hex, $L, 1)

        $nb = 0

        while $Ch <> $HexArr[$nb] and $nb < 16

            $nb = $nb + 1

        loop

        if $nb = 16 ; Error in hex-string, contains non-valid characters

            $HexToDec = 0

            exit 87

        endif

        $HexToDec = $HexToDec + $nb * $Fac

        $Fac = $Fac * 16

    next

endfunction



function udfBytes2Array($abBytes)

    dim $oStream,$adTypeBinary,$adTypeText,$i

    $adTypeBinary = 1

    $oStream = createobject("ADODB.Stream")

    if @error exit @error endif



    $oStream.Type=$adTypeBinary

    $oStream.open



    $oStream.Write($abBytes)

    $oStream.Position = 0



    redim preserve $udfBytes2Array[$oStream.Size-1]



    for $i = 0 to ubound($udfBytes2Array)

        $udfBytes2Array[$i] = asc($oStream.Read(1))

    next



    $oStream = 0

    exit 0

endfunction