Solved

Exporting security groups with user information, csvde - csv dump

Posted on 2013-11-25
5
1,358 Views
Last Modified: 2014-01-14
Hi,

How's it going? I'm wondering if anyone can help me with a shell command that will export all security groups from a specific OU with the names\accounts of each member of the groups in a format that's  importable to a new AD domain.  

I've tried going to a few sites and using various commands but I'm running into issues as I'm a complete noob, this one doesn't work at all and I'm in a rush due to a project.
"csvde -d "ou=West,dc=MyDomain,dc=com" -f group.csv -l objectClass,cn,member,distinguishedName,sAMAccountName,groupType,objectCategory"

Any help would be most appreciated.

Cheers
0
Comment
Question by:RWA203
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
5 Comments
 
LVL 31

Expert Comment

by:Gareth Gudger
ID: 39673967
Try looking at the Import/Export options of LDIFDE.
http://support.microsoft.com/kb/237677
0
 
LVL 40

Expert Comment

by:Subsun
ID: 39674212
You can use the following script if you have MS AD PowerShell enabled..
Get-ADGroup -Filter {GroupCategory -eq "Security"} -ResultSetSize Unlimited | % {
$Group = $_
Get-ADGroupMember $Group.Name | Select @{L='GroupName';e={$Group.Name}},Name,ObjectClass
} | Export-Csv C:\Result.csv -NoTypeInformation

Open in new window

If not you may install Quest AD PS in any member computer in you domain and use the following script..
ActiveRoles Management Shell for Active Directory
Get-QADGroup -SizeLimit 0 | ?{$_.GroupType -eq "Security"} | % {
$Group = $_
Get-QADGroupMember $Group.Name | Select @{L='GroupName';e={$Group.Name}},Name,Type
} | Export-Csv C:\Result.csv -NoTypeInformation

Open in new window

0
 

Author Comment

by:RWA203
ID: 39676628
Cheers, I have powershell. I'll give it a try.
0
 

Accepted Solution

by:
RWA203 earned 0 total points
ID: 39770267
I ended up using Manage engines ADManager Plus, which is what I would recommend to anyone doing a migration. The 30 day trial gives you full reports functionality for just about anything you can think of as well as bulk import export stuff. Really useful.
0
 

Author Closing Comment

by:RWA203
ID: 39778813
This is far easier and has all reports built into a gui, rather then trying to learn the powershell commands or learning to script .Great for non scripty people who need to get things done quickly.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A hard and fast method for reducing Active Directory Administrators members.
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

732 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question