We help IT Professionals succeed at work.

See Group Memberships in AD

Can you make a report from ADUC or other built-in tool to see Group's memberships in the fashion easy to understand.  So it will show in kind of hierarcical tree to easy to present and explain.
Please advice.
Thank you.
Comment
Watch Question

Assistant Vice President\Network Manager
Commented:
There are several ways to accomplish this. I personally prefer to use SomarSoft's DumpSec. http://www.systemtools.com/somarsoft/index.html 
It has a nice GUI and plenty of options for gathering information.

There are also a number of scripting methods you could use that I am sure others will point you to.

Author

Commented:
What I am loooking for is something like this.  FRor example: the user is part of the Global Group that is part of the Local Group. I don't want that user to be a part of the Local Group directly.  

Is there a way with or withuot a tool that can show me this user is a member of all these groups.  And not like he/she  a member of this group and this group is a member of this group..  

This is what I need....
Shabarinath RamadasanInfrastructure Architect
Commented:
One option I see is to list the members (direct and indirect) of the main group.
You can get this by using Quest AD Commandlets.

Get-QADUser -IndirectMemberOf maingroup

If you want to list out the indirect members of a group, you can try

Get-QADGroupMember maingroup -Indirect

Good luck !
Shaba
Shabarinath RamadasanInfrastructure Architect
Commented:
You need to download quest ad command-lets from
http://www.quest.com/powershell/activeroles-server.aspx 
Krzysztof PytkoSenior Active Directory Engineer
Top Expert 2012
Commented:
Try with free ADInfo. You can define by yourself what you are looking for. Remember when there is more that 25 group members, you need to export results to file to be able to see all of them :)
http://www.cjwdev.co.uk/Software/ADReportingTool/Download.html

Regards,
Krzysztof

Author

Commented:
Okay I will try with Quest powershell tool and let you know.  

Is there any way to do it just in ADUC with advanced features or scripts?
You don't need Quest powershell for this, you can do it with Windows Servers own Active Directory powershell module.

get-adgroupmember "GROUP NAME" -recursive

Author

Commented:
Thanks Thomas. I think I would need something from visual reporting for management.  Like to show a membership for one user, all groups (Global and Local) he/she a member of.
Krzysztof PytkoSenior Active Directory Engineer
Top Expert 2012

Commented:
Did you try ADInfo as I suggested above?

Krzysztof

Author

Commented:
Not yet.   I will try sometime this week and will let you know.

Thanks!
Krzysztof PytkoSenior Active Directory Engineer
Top Expert 2012

Commented:
You're welcome :)

Krzysztof

Author

Commented:
Sorry for the delay.   Looking at the different options here.