Solved

Copy AD Groups..

Posted on 2009-05-04
3
673 Views
Last Modified: 2012-05-06
Hi,

How can we copy any Active Directory group ?

I need to do so, so that membership remains the same.

0
Comment
Question by:Tausif_a_khan
3 Comments
 
LVL 58

Accepted Solution

by:
tigermatt earned 500 total points
ID: 24294068

There is no built-in feature in Active Directory to duplicate a group to create a new group with the same group membership.

You need to create a new group. You can then use two possible approaches to have the members gain membership of both groups:

If this will be a recurring event, and all new users added to one group will need to also be members of the other group, make the existing group a Member of the new group. That way, all members of the original group will automatically inherit the permissions assigned to the new group automatically.

If this is only a one-time event where users need copying between groups and then new users will only be made a member of one group, you need a script to do the copy. This script will do the job: http://www.microsoft.com/technet/scriptcenter/resources/qanda/apr05/hey0426.mspx. Simply define the DNs of the old and new groups, and it will do the copy for you to duplicate the group membership.

-Matt
0
 
LVL 16

Expert Comment

by:gurutc
ID: 24294105
Hi,

In addition to the above excellent post, the following link has an excellent guide by Guy Thomas on how to use the CSVDE tool to manipulate AD Objects and Attributes:

http://www.computerperformance.co.uk/Logon/Logon_CSVDE.htm

Good Luck,

- gurutc
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Do you have users whose passwords are expiring and they are constantly calling you?  Well I sure did and needed a way to put an end to this.  We have a lot of remote users which would not be notified that their passwords were expiring since they wer…
Synchronize a new Active Directory domain with an existing Office 365 tenant
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now