How can I quickly get a list of the members of an AD group so I can print them out and/or send the list to managers to find out if they should really be in the group?
Thanks in advance for your suggestions.
Software/Hardware used:
ASKED:
January 17, 2007 1:53 PM
UPDATED:
January 19, 2007 10:07 AM
Check out this thread…
http://groups.google.com/group/microsoft.public.windows.server.active_directory/browse_thread/thread/efdf2f0c99615bb4/4b8447f9dde66b4e%234b8447f9dde66b4e
Try this script at windowsitpro.com:
http://www.windowsitpro.com/Article/ArticleID/93884/93884.html
Try this tool: AD Inspector from Intrusense
http://www.intrusense.com/software/adinspector/
Nice GUI, filtering, export to CSV
Here is a very simple command, what this does is list all users in ADS to a text file then open the file and and go through each user to find all the groups that that individual belongs to. The final output file group.txt will have the information that you requested, of course you will need to be an administrator to use this script.
dsquery user -limit 0 | dsget user -samid > samid.txt
for /f %%A in (samid.txt) do (echo %%A >> group.txt & dsquery user -samid %%A | dsget user -memberof >> group.txt)