Map out group memberships in Active Directory

This is a tough one, which is why it is 500 points. I am looking for a way to list my groups within Active Directory and have it map which groups and\or users are members of those groups. I was looking to do this manually in Visio but if there is a way to have this done automatically that would save a lot of time. I am working with about 300 groups and would like to see an overview of how they are connected. Anything that leads my in the right direction will get the points.
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.


there was actually an add on for visio 2002 that got discontinued that allowed you to import your AD structure into Visio

however it was ony available for Visio 2002 and wasnt cheap..

Microsoft Visio Enterprise Network Tools 2002

i was looking for a solution for the same thing some time ago and wasnt able to get the approval to purchase this product sadly

EFHCAuthor Commented:
Well that is a sad start, but if anybody knows of way now to do this please let me know.

hmm have a read of this which i just found....

maybe i missed something in my searches before!
The 7 Worst Nightmares of a Sysadmin

Fear not! To defend your business’ IT systems we’re going to shine a light on the seven most sinister terrors that haunt sysadmins. That way you can be sure there’s nothing in your stack waiting to go bump in the night.

Good program:

You can download for free... costs a little if you want to use this long term

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Actually what you can also try is, using a batch (logon) script and the IFMEMBER program check which AD group a certain user is in.

:: Check for group membership, then map drive
NET USE Q: \\servername\path\ /PERSISTENT:NO
:: rest of script..

Open in new window

It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.