See Group Memberships in AD

Can you make a report from ADUC or other built-in tool to see Group's memberships in the fashion easy to understand.  So it will show in kind of hierarcical tree to easy to present and explain.
Please advice.
Thank you.
LVL 17
Tiras25Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Steven CarnahanNetwork ManagerCommented:
There are several ways to accomplish this. I personally prefer to use SomarSoft's DumpSec. http://www.systemtools.com/somarsoft/index.html 
It has a nice GUI and plenty of options for gathering information.

There are also a number of scripting methods you could use that I am sure others will point you to.

0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Tiras25Author Commented:
What I am loooking for is something like this.  FRor example: the user is part of the Global Group that is part of the Local Group. I don't want that user to be a part of the Local Group directly.  

Is there a way with or withuot a tool that can show me this user is a member of all these groups.  And not like he/she  a member of this group and this group is a member of this group..  

This is what I need....
0
Shabarinath RamadasanInfrastructure ArchitectCommented:
One option I see is to list the members (direct and indirect) of the main group.
You can get this by using Quest AD Commandlets.

Get-QADUser -IndirectMemberOf maingroup

If you want to list out the indirect members of a group, you can try

Get-QADGroupMember maingroup -Indirect

Good luck !
Shaba
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Shabarinath RamadasanInfrastructure ArchitectCommented:
You need to download quest ad command-lets from
http://www.quest.com/powershell/activeroles-server.aspx 
0
Krzysztof PytkoSenior Active Directory EngineerCommented:
Try with free ADInfo. You can define by yourself what you are looking for. Remember when there is more that 25 group members, you need to export results to file to be able to see all of them :)
http://www.cjwdev.co.uk/Software/ADReportingTool/Download.html

Regards,
Krzysztof
0
Tiras25Author Commented:
Okay I will try with Quest powershell tool and let you know.  

Is there any way to do it just in ADUC with advanced features or scripts?
0
Thomas-MjeldeCommented:
You don't need Quest powershell for this, you can do it with Windows Servers own Active Directory powershell module.

get-adgroupmember "GROUP NAME" -recursive
0
Tiras25Author Commented:
Thanks Thomas. I think I would need something from visual reporting for management.  Like to show a membership for one user, all groups (Global and Local) he/she a member of.
0
Krzysztof PytkoSenior Active Directory EngineerCommented:
Did you try ADInfo as I suggested above?

Krzysztof
0
Tiras25Author Commented:
Not yet.   I will try sometime this week and will let you know.

Thanks!
0
Krzysztof PytkoSenior Active Directory EngineerCommented:
You're welcome :)

Krzysztof
0
Tiras25Author Commented:
Sorry for the delay.   Looking at the different options here.  
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.