yup - moved the first endif to the end of the code block. It was too early and I was without coffee when I first wrote it. Where I originally had the EndIf closed the first If, and it mapped only if you were a member of multiple groups. I moved the endif and cleaned up the indent, and spend a few more minutes trying to figure out what the RED line was, even thinking about possible typos.. Did you intend to highlight something??
Anyway.. my login script code puts that kind of logic into a UDF that is called for each mapped resource. Returns a boolean indicating that the resource is permitted or not. Handles group, multi-group, and OU memberships (and non-memberships, as well as other mechanisms.
Glenn
_________________________
Actually I
am a Rocket Scientist!
