Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

how do i identify users of a domain security group and members of any nexted groups?

Posted on 2013-06-14
6
Medium Priority
?
391 Views
Last Modified: 2013-06-20
how do i identify users of a domain security group and members of any nexted groups in server 2003?

Thanks
0
Comment
Question by:Jason Thomas
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 5

Expert Comment

by:MisterTwelve
ID: 39247157
0
 
LVL 1

Author Comment

by:Jason Thomas
ID: 39247159
Thanks, anyone know if there are any windows command line tools that i can use other than VB scripts
0
 
LVL 5

Assisted Solution

by:vin_shooter
vin_shooter earned 1000 total points
ID: 39247230
Hi,

Check the below commands,

 1. How to find all members for a particular group
 
  dsget group "<DN of the group>" -members

1a. How to find all groups for a particular member (including nested groups)
 
  dsget user "<DN of the user>" -memberof -expand
  dsquery user -samid "username" | dsget user -memberof -expand
 

Can go through the below link for few more commands..,

http://social.technet.microsoft.com/wiki/contents/articles/2195.active-directory-dsquery-commands.aspx
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 
LVL 1

Author Comment

by:Jason Thomas
ID: 39247253
Many thanks for that helps me a lot. If i run teh first command it does give me teh mebers but it also list other groups. Is there a command that will show me the mebers of the DN and members of any nexted groups that you know of?
0
 
LVL 5

Accepted Solution

by:
MisterTwelve earned 1000 total points
ID: 39247255
dsquery user -samid USER | dsget user -Memberof -expand | dsget Group -samid

Replace USER for your user you need
0
 
LVL 1

Author Closing Comment

by:Jason Thomas
ID: 39261755
Thanks guys. Sorry for the late feedback.
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
Active Directory can easily get cluttered with unused service, user and computer accounts. In this article, I will show you the way I like to implement ADCleanup..
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

722 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question