Link to home
Start Free TrialLog in
Avatar of EFHC
EFHCFlag for United States of America

asked on

Map out group memberships in Active Directory

This is a tough one, which is why it is 500 points. I am looking for a way to list my groups within Active Directory and have it map which groups and\or users are members of those groups. I was looking to do this manually in Visio but if there is a way to have this done automatically that would save a lot of time. I am working with about 300 groups and would like to see an overview of how they are connected. Anything that leads my in the right direction will get the points.
Avatar of Jay_Jay70
Jay_Jay70
Flag of Australia image

Hi EFHC,

there was actually an add on for visio 2002 that got discontinued that allowed you to import your AD structure into Visio

however it was ony available for Visio 2002 and wasnt cheap..

Microsoft Visio Enterprise Network Tools 2002

i was looking for a solution for the same thing some time ago and wasnt able to get the approval to purchase this product sadly

Cheers!
Avatar of EFHC

ASKER

Well that is a sad start, but if anybody knows of way now to do this please let me know.
EFHC,

hmm have a read of this which i just found....
http://www.mcpmag.com/columns/article.asp?EditorialsID=112

maybe i missed something in my searches before!
ASKER CERTIFIED SOLUTION
Avatar of NJComputerNetworks
NJComputerNetworks
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Avatar of Jeffrey Kane - TechSoEasy
Jeffrey Kane - TechSoEasy
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Arjan_S
Arjan_S

Actually what you can also try is, using a batch (logon) script and the IFMEMBER program check which AD group a certain user is in.

:: Check for group membership, then map drive
%LOGONSERVER%\NETLOGON\IFMEMBER.EXE "DOMAIN\VISIOUSERS"
IF NOT ERRORLEVEL==1 GOTO NOVISIO
IF /I EXIST "Q:" NET USE Q: /DELETE /YES
NET USE Q: \\servername\path\ /PERSISTENT:NO
Q:
 
:NOVISIO
:: rest of script..

Open in new window