Link to home
Start Free TrialLog in
Avatar of bsharath
bsharathFlag for India

asked on

Via Ldap how can i retrieve all group members?

Hi,

Via Ldap how can i retrieve all group members?
So can use as a query in AD.
Thanks
ASKER CERTIFIED SOLUTION
Avatar of Mike Kline
Mike Kline
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of bsharath

ASKER

Thanks
But does not work

(&(&(objectcategory=person)(objectClass=user)(memberOf=IUK)))

IUK is the group name
When people refer to a DN, or distringuishedName, in Active Directory, it is the fully qualified name structure, as in
memberOf=CN=IUK,OU=SecondOU,OU=FirstOU,DC=domain,DC=com

Rob.
Thanks Rob it does work
Can we just give the group name rather than whole
not via an ldap query using memberof, you need then entire DN

thanks

Mike
Any other ways?
The only other way is via a script, or the command line tools, I think something like
dsquery group domainroot -name iuk* | dsget group -members

Rob.
If you get
dsget failed:`Target object for this command' is missing.

that means that the dsquery did not find a group name matching your string value.

Rob.
are you just trying to run queries against AD?   Can you use third party (free) tools also?
I want it via the AD queries
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial