[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 756
  • Last Modified:

domain admins report

1) Are there any free tools to produce a report to list ONLY members of the domain admins group, and in tabular format, per account in the domain admins report the following fields:

username
comment
account active
account expires
password last set
password expires
password-changeable
password-required
user may change password
last logon

I know you can get this from net user commands but theres 50 to go through so would prefer one tool to provide one report for all memebers of domain admins....

2) Also, there any other default AD groups that give strong/powerful permissions in a domain? Is domain admins the top one? Could you list perhaps the top 5 - and some discussion what rights they give people?
0
pma111
Asked:
pma111
  • 3
  • 2
1 Solution
 
Mike KlineCommented:
A few ways you could do it, some command line methods include adfind, powershell, and dsquery

http://www.joeware.net/freetools/tools/adfind/index.htm

adfind -default -f "(memoberof=DN of domain admins)" samaccountname pwdlastset....

I only outputted two attributes, you can see a good list of attributes here   http://www.selfadsi.org/user-attributes-w2k8.htm

if you prefer a free GUI tool then try adinfo   http://www.cjwdev.co.uk/Software/ADReportingTool/Info.html 

you can select users and then "users that are direct members of specified group"

List of default groups here   http://technet.microsoft.com/en-us/library/cc756898(v=ws.10).aspx 

many have elevated rights as you can see (enterprise admins, schema admins, account operators, and server operators just to name a few)

Thanks

Mike
0
 
pma111Author Commented:
Cheers mike
0
 
pma111Author Commented:
For some reason though returns 0 results.....
0
 
Mike KlineCommented:
can you copy the command you used?

Thanks

Mike
0
 
pma111Author Commented:
adfind -default -f "(memoberof=DN of domain admins)" samaccountname pwdlastset

cheers
0

Featured Post

Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now