asked on

Active Directory, export usernames that are members of a security group

My company have round 8-9k users.
I work in helpdesk and get cases where managers ask "who has access to my area on server"

Idealy i want to generate a report that simply lists the names of who has write access to the specified area via the manual security group they are member of.

The different groups can have 100`s of members.

Is there some easy way to solve this for a helpdes teq?

Thanks

ASKER CERTIFIED SOLUTION

Daryl Bamforth

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Lavender

ASKER

I think one problem is that powershell commandlets is diasbled on DC.
ADSI based soulutions is heldpesks best bet i think

Daryl Bamforth

You can do this from your desktop with Remote Server Administration tools installed.

https://support.microsoft.com/en-us/help/2693643/remote-server-administration-tools-rsat-for-windows-operating-systems

You should steer away from running any scripts that are not necessary directly on the DC.

Klavs R

You can try my AD reporting tool - AD FastReporter.
You can run it from your computer and it will use your current security context to get info from AD using LDAP.

In the Free version, you can use Groups->Security groups report, add Group Members(All) field to see its members.
In the Pro version, you could create User report with your own filter like Group Memberships equals to "your security group".