Local Group Membership for AD accounts

Posted on 2011-10-18
Last Modified: 2012-05-12
We're trying to figure out how to know what local groups an AD account has access to on a specific computer, but the only commands I can seem to find deal with group membership when it comes to AD groups, but not local groups.

Does anyone know of a command, whether through the command prompt, or Powershell, that can return the list of which local groups an AD user is a part of??

I'm sure it's something easy that's eluding me - any help is appreciated!!
Question by:waverazor
    1 Comment
    LVL 17

    Accepted Solution

    Regrettably, you cannot find out what local groups an Active Directory group or user is a member of.  Memberships can only be seen inside the Active Directory Domain itself - and external members (like forest trusts or remote computers) are not backlinked, and therefore not traceable.

    On the specific computer, you can list the local group members by using NET LOCALGROUP to view it's members - this will list all group members, and will include domain groups or domain users, as long as it can talk to the domain to resolve the member SIDs.


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Are end users causing IT problems again?

    You’ve taken the time to design and update all your end user’s email signatures, only to find out they’re messing up the HTML, changing the font and ruining the imagery. What can you do to prevent this? Find out how you can save your signatures from end users today.

    If you migrate a Terminal Server licenses server inside the 2008 server family, you can takte advantage of the build-in migration tool. If you like to migrate an older 2003 Server (and the installed client CALs) to a 2008 R2 server for example, you …
    You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
    To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
    This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now