ad report all users in all groups and user stats

I need a script of some sort to:

1) List all groups in a domain and their members (output into 1 single report ideally csv/xlsx)

2) List all users in a domain and include the following (username, account status (i.e. disabled or not), accurate last login date. Again output to csv or similar.

Any pointers most welcome. If any of the scripts require additioanl software on the windows 7 PC please detail that in your reply.
LVL 3
pma111Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

tetran_auCommented:
Is this a once off or do you need to regularly provide these reports.

I had a project recently where i had to audit a domain to prepare for a migration. I used this program.  Its a paid service but gives you a 60 day grace feature that has most of the reports available.

http://www.manageengine.com/products/ad-manager/index.html?ADMPID=101011&kw=manageengine&adId=11195857362&gclid=CO6R4ur6xr8CFRNwvAodXn4A9w

You can complete a audit on all users, groups and group memberships and export them into various forms (Excel, HTTML etc)

Some details on the reporting

http://www.manageengine.com/products/ad-manager/windows-active-directory-reports.html

http://www.manageengine.com/products/ad-manager/active_directory_user_reports.html

http://www.manageengine.com/products/ad-manager/active_directory_group_reports.html

If its a once off , download and install the trail, run your reports and then uninstall.  If you need it as a regular process then you can simply purchase a license.  After the 60 day grace period it will limit the reports to first 100 objects.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
pma111Author Commented:
its a one off.. was hoping for scripts but will give your software a go!
thanks
0
pma111Author Commented:
I was aware of get-aduser and get-adgroup member but couldnt see an easy way to do them for all groups and all users
0
tetran_auCommented:
Hi pma111,  

Yeah i thought you may have been after a script however if you have limited scripting experience like i do then you would most probably run into a whole bunch of issues trying to customise the scripts to your exact needs. That software is basically point and click and will take a whole 5 minutes to install and a whole 5 minutes to work your self around the GUI so your comfortable.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Powershell

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.