Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies. Only from Platform Scholar.
COURSE of the MONTH
10 days, 15 hours left to enrollBecome a Premium Member and unlock a new, free course in leading technologies each month.
Solved
Find Distribution Groups in Active Directory.
Posted on 2013-01-01
I have a strange request. I have been asked to find all the distribution groups in AD that have more than a specific number of users, say 20 for the sake of argument.
Is there a way to query AD and return a list of groups that only meet that criteria?
Any help would be appreciated.
Is there a way to query AD and return a list of groups that only meet that criteria?
Any help would be appreciated.
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
-
6
4
3- +1
14 Comments
This can be done using powershell very easily -
Get-DistributionGroup | Get-DistributionGroupMembe
above command will give you the DL list in a csv file and then you can apply filters as required. (It needs to be executed from an exchange shell)
or you may want to try this -
http://community.spiceworks.com/scripts/show/1388-export-distribution-list-members
Get-DistributionGroup | Get-DistributionGroupMembe
above command will give you the DL list in a csv file and then you can apply filters as required. (It needs to be executed from an exchange shell)
or you may want to try this -
http://community.spiceworks.com/scripts/show/1388-export-distribution-list-members
Active 4 days ago
Sometime back I created following batch script for similar purpose, hope it works for you.
Save this script with any name having .cmd extention and execute with a number parameter.
Like: GroupWithMembers.cmd 10
Save this script with any name having .cmd extention and execute with a number parameter.
Like: GroupWithMembers.cmd 10
@ECHO OFF
IF "%1" LEQ "0" ECHO Invalid parameter.&&GOTO :End
IF EXIST _Output.txt DEL _Output.txt
FOR /F "delims=" %%g IN ('DSQuery * -Filter "(&(ObjectClass=Group)(groupType=2))" -Limit 0') DO (
ECHO Quering: %%g
DSGET Group %%g -members >TmpMbrs.txt
FOR /F %%c IN ('TYPE TmpMbrs.txt ^|FIND "=" /C') DO (
IF %%c GTR %1 ECHO Group: %%g Members: %%c >>_Output.txt))
ECHO.&ECHO Script finished.
IF EXIST _Output.txt (
START "" Notepad.exe _Output.txt) ELSE (
ECHO No group with more than %1 members found.)
:End
This is close to what I need.
The only problem is that I have around 700 DLs, but this only queries 5 of them.
None of them are in the same OU.
How can I make sure it queries all OUs?
The only problem is that I have around 700 DLs, but this only queries 5 of them.
None of them are in the same OU.
How can I make sure it queries all OUs?
Active 4 days ago
Copy and paste following statement on command line and see if it is listing all your distribution groups?
DSQuery * -Filter "(&(ObjectClass=Group)(groupType=2))" -Limit 0
Active 4 days ago
With this?
DSQuery * ForestRoot -Filter "(&(ObjectClass=Group)(groupType=2))" -Limit 0
That gives me a bunch more, but from other domains in the forest.
It still only returns the same 5 from my domain.
I thought maybe it might be a problem on my workstation, but I get the same results from one of the DCs.
For the heck of it, I tried DomainRoot as well, but that only gave me the same 5 DLs as the first command.
It still only returns the same 5 from my domain.
I thought maybe it might be a problem on my workstation, but I get the same results from one of the DCs.
For the heck of it, I tried DomainRoot as well, but that only gave me the same 5 DLs as the first command.
yo_bee
All I need is the name of the group, and the count of members.
If not the count, just that it has more members than 20.
All I need is the name of the group, and the count of members.
If not the count, just that it has more members than 20.
Active 4 days ago
Sorry my mistake - In above statement I only mentioned GroupType=2 which means Global Distribution groups (not Domain Local & Universal).
Check following:
Check following:
@ECHO OFF
IF "%1" LEQ "0" ECHO Invalid parameter.&&GOTO :End
IF EXIST _Output.txt DEL _Output.txt
FOR /F "delims=" %%g IN ('DSQuery * -Filter "(&(ObjectClass=Group)(|(groupType=2)(groupType=4)(groupType=8)))" -Limit 0') DO (
ECHO Quering: %%g
DSGET Group %%g -members >TmpMbrs.txt
FOR /F %%c IN ('TYPE TmpMbrs.txt ^|FIND "=" /C') DO (
IF %%c GTR %1 ECHO Group: %%g Members: %%c >>_Output.txt))
ECHO.&ECHO Script finished.
IF EXIST _Output.txt (
START "" Notepad.exe _Output.txt) ELSE (
ECHO No group with more than %1 members found.)
:End
farhankazi
It looks like it is working; it was still running when I left the office.
I'll check it in the morning and get back to you.
Thanks
It looks like it is working; it was still running when I left the office.
I'll check it in the morning and get back to you.
Thanks
Active today
I see that you may have a solution, but I figured I lend my little snippet.
Copy and paste into notepad and save as a .ps1
from Run or Command prompt.
powershell script.ps1 > output.txt
Copy and paste into notepad and save as a .ps1
from Run or Command prompt.
powershell script.ps1 > output.txt
import-module activedirectory
$Grouplist = Get-ADGROUP -Filter 'GroupCategory -eq "Distribution"'
forEach ($group in $grouplist)
{
$a = (Get-ADGroupMember -identity $group.name | Measure-Object)
if ($a.count -ge '20')
{
write-host $group.name $a.count
}
}
yo_bee
Yours gives a clean output, but it wouldn't work in Powershell. I changed the command to work with Quest management shell.
farhankazi
Your solution provides me with the information I need, I just need to work with the output to make it more readable.
Thanks to both of you for your help.
Yours gives a clean output, but it wouldn't work in Powershell. I changed the command to work with Quest management shell.
farhankazi
Your solution provides me with the information I need, I just need to work with the output to make it more readable.
Thanks to both of you for your help.
Featured Post
Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies. Only from Platform Scholar.
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
A hard and fast method for reducing Active Directory Administrators members.
In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility.
Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses
Course of the Month10 days, 15 hours left to enroll
770 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.