List members of a given group

permalink · 09-27-2006, 08:42 AM

I need a script that will recursively list user objects ONLY who are members of an AD group. The problem I have is that there are several Groups who are members of the Enterprise Admins group, and a lot of those groups have groups as members etc. The mess is humungous. I'm looking for a script that will list all the unique User Objects, domain by domain, OU by OU, who are ultimately members of the Enterprise Admins group.

Thanks in advance

**Squashman** · 09-27-2006, 08:53 AM

That is a tough challenge and it certainly does sound like a complete utter mess. You should beat the guy who setup that AD.

Joeware has alot of neat utilities that he wrote. I am not sure if any of them will do what you want them to do. But you may be able to list all the groups a person is in and then grep that output for the Enterprise admins group.

http://www.joeware.net/win/free/all.htm

permalink · 09-27-2006, 11:28 AM

Thanks very much, I've made contact. Yes, it's a pretty hairy challenge; but I don't think it was designed that way - I think it simply "grew" or "evolved" into what it is now. There doesn't seem to be any "Best Practice" mentality in this organisation.

Thanks

**bilbus** · 09-29-2006, 05:23 PM

you used

DSQuery? or the other DS tools?

09-27-2006, 08:42 AM	#1 (permalink)
stonelaughter Guest Posts: n/a OS:	List members of a given group I need a script that will recursively list user objects ONLY who are members of an AD group. The problem I have is that there are several Groups who are members of the Enterprise Admins group, and a lot of those groups have groups as members etc. The mess is humungous. I'm looking for a script that will list all the unique User Objects, domain by domain, OU by OU, who are ultimately members of the Enterprise Admins group. Thanks in advance

09-27-2006, 08:53 AM	#2 (permalink)
Squashman Tech, Networking Forums Join Date: Apr 2005 Location: 1265 Lombardi Ave. Posts: 1,142 OS: All of the above	That is a tough challenge and it certainly does sound like a complete utter mess. You should beat the guy who setup that AD. Joeware has alot of neat utilities that he wrote. I am not sure if any of them will do what you want them to do. But you may be able to list all the groups a person is in and then grep that output for the Enterprise admins group. http://www.joeware.net/win/free/all.htm

09-27-2006, 11:28 AM	#3 (permalink)
stonelaughter Guest Posts: n/a OS:	Thanks very much, I've made contact. Yes, it's a pretty hairy challenge; but I don't think it was designed that way - I think it simply "grew" or "evolved" into what it is now. There doesn't seem to be any "Best Practice" mentality in this organisation. Thanks

09-29-2006, 05:23 PM	#4 (permalink)
bilbus TSF Enthusiast Join Date: Aug 2006 Posts: 949 OS: OS2 Warp	you used DSQuery? or the other DS tools?

Thread Tools
Show Printable Version Email this Page Mark Resolved