You can also do this with command line tools without scripts. Anything that does LDAP queries such as LDIFDE, CSVDE, or my very own ADFind
 
adfind -b dc=domain,dc=com -f objectcategory=group member
 
This will create a dump like:
 
[Fri 06/04/2004 23:29:21.58]
F:\DEV\cpp\CPAU>adfind -default -f objectcategory=group member
 
AdFind V01.15.00cpp Joe Richards ([EMAIL PROTECTED]) April 2004
 
Using server: 2k3dc01.joe.com
Base DN: DC=joe,DC=com
 
dn:CN=HelpServicesGroup,CN=Users,DC=joe,DC=com
>member: CN=SUPPORT_388945a0,CN=Users,DC=joe,DC=com
 
dn:CN=TelnetClients,CN=Users,DC=joe,DC=com
 
dn:CN=WINS Users,CN=Users,DC=joe,DC=com
 
dn:CN=DHCP Users,CN=Users,DC=joe,DC=com
 
dn:CN=DHCP Administrators,CN=Users,DC=joe,DC=com
 
dn:CN=Administrators,CN=Builtin,DC=joe,DC=com
>member: CN=Domain Admins,CN=Users,DC=joe,DC=com
>member: CN=Enterprise Admins,CN=Users,DC=joe,DC=com
>member: CN=Administrator,CN=Users,DC=joe,DC=com
 
dn:CN=Users,CN=Builtin,DC=joe,DC=com
>member: CN=Domain Users,CN=Users,DC=joe,DC=com
dn:CN=Guests,CN=Builtin,DC=joe,DC=com
>member: CN=Domain Guests,CN=Users,DC=joe,DC=com
>member: CN=Guest,CN=Users,DC=joe,DC=com
<SNIP>


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Christine Easton
Sent: Friday, June 04, 2004 12:43 PM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] Scripts

Can anyone point me to a script for Active Directory that will give me what groups I have and the users in them?  Thanks
 
 
-Christine

Reply via email to