protected void Page_load(object sender, EventArgs e) { // if session user is empty then // get the logged in user // check if is in the valid ad group // if true then continue // else redirect to login page string _domain = ConfigurationManager.AppSettings.Get("domain"); string _domainController = ConfigurationManager.AppSettings.Get("domainController"); string _userGroups = ConfigurationManager.AppSettings.Get("userGroups"); if (!IsPostBack) { if (Session["UserId"] == null) { string loggedInWindowsUser = WindowsIdentity.GetCurrent().Name; if (AdService.IsInGroup(_userGroups, _domain, _domainController)) { Session["UserId"] = loggedInWindowsUser; } else { Response.Redirect("Login.aspx"); } } } }