Hi folks, i want to validate the user & password in the domain prior to send a transaction over the LAN to a server (the transaction has data encrypted because manages sensible data) and I want to secure if the user account is in the correct domain group to validate rights level in the app.
The goal of this procedure is for avoiding that some users access be restricted or be not authorized and to avoid invalid administrative requests.

Example:
User: AMedina
Computer Domain: EMPRESA
User Domain: EMPRESA\Domain Tech Supervisors
-> This user validates in domain/users domain and can sends sensible data.

User: JFredes
Computer Domain: EMPRESA
User Domain: EMPRESA\Domain Users
-> This user validates domain but NOT validate users domain and CAN'T sends sensible data.

APIs and example codes are welcome.


____________________________
Aleks