?
Solved

AD security groups

Posted on 2012-04-11
7
Medium Priority
?
364 Views
Last Modified: 2012-06-04
Hi can anyone tell me if theres a way to export the users from a Active Directory Security group to maybe like an Excel spreadsheet? I need to see how many users are in a group. Thanks
0
Comment
Question by:Thomas N
7 Comments
 
LVL 31

Expert Comment

by:Rich Weissler
ID: 37833741
Sure.  Hopefully you'll have access to the csvde command:

csvde -f groupmem.csv -r "(sAMAccountName=Groupname)" -l member 

Open in new window


That'll put it in a csv file, which can easily be imported into Excel.

A second option would be to use Powershell...
0
 
LVL 1

Expert Comment

by:Tosiisoa
ID: 37833755
If you have 2008 you can export users to .csv or .txt file ADUC. (Active directory users and computers)
Just open the group you want and choose Action -> Export list...

I'm not sure if you can do this in 2003. Then you can use csvde or ldifde.
 
http://www.computerperformance.co.uk/Logon/Logon_CSVDE_Export.htm
0
 
LVL 17

Expert Comment

by:Anuroopsundd
ID: 37833758
in powershell

Get-ADGroupMember "Group Name" | Get-ADUser | Select-Object Name, mail | Export-Csv -Path "C:\group.csv" -NoTypeInformation
0
Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

 
LVL 57

Accepted Solution

by:
Mike Kline earned 2000 total points
ID: 37833759
You can use a tool like csvde to export   http://www.computerperformance.co.uk/Logon/Logon_CSVDE_Export.htm

I also like a third party tool (free) called adfind from MVP Joe Richards

http://www.joeware.net/freetools/tools/adfind/index.htm

Joe has some nice shortcuts

adfind -sc g:"group name" member

just want the count

adfind -sc g:"group name" member -list | adfind -c


adfind
Powershell is another good way to get this info

Thanks

Mike
0
 
LVL 6

Expert Comment

by:-tjs
ID: 37834031
Here's another nifty command built into Windows (any domain member should have this) that will list members directly in your group and also members implicitly part of your group through nested groups:

dsquery group -name "My Group Name Goes Here" | dsget group -members -expand
0
 
LVL 17

Expert Comment

by:Tony Massa
ID: 37834529
ADFind is awesome, so I'll always suggest it for stuff like this.  To expand on mkline71's post, the new version of ADFIND allows you to count the number of multivalued attributes now.  
Added -cv switch which will count values on multivalue attributes. I find this is useful for working out how many group members there are etc in a given very large group.
Hooray Joe Richards!  You're the best.
0
 

Author Comment

by:Thomas N
ID: 37952684
thanks
0

Featured Post

The new generation of project management tools

With monday.com’s project management tool, you can see what everyone on your team is working in a single glance. Its intuitive dashboards are customizable, so you can create systems that work for you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This process allows computer passwords to be managed and secured without using LAPS. This is an improvement on an existing process, enhanced to store password encrypted, instead of clear-text files within SQL
Native ability to set a user account password via AD GPO was removed because the passwords can be easily decrypted by any authenticated user in the domain. Microsoft recommends LAPS as a replacement and I have written an article that does something …
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Suggested Courses

601 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question