You can also do this with command line tools without
scripts. Anything that does LDAP queries such as LDIFDE, CSVDE, or my very own
ADFind
adfind -b dc=domain,dc=com -f objectcategory=group
member
This will create a dump like:
[Fri 06/04/2004 23:29:21.58]
F:\DEV\cpp\CPAU>adfind -default -f objectcategory=group member
F:\DEV\cpp\CPAU>adfind -default -f objectcategory=group member
AdFind V01.15.00cpp Joe Richards ([EMAIL PROTECTED]) April
2004
Using server: 2k3dc01.joe.com
Base DN: DC=joe,DC=com
Base DN: DC=joe,DC=com
dn:CN=HelpServicesGroup,CN=Users,DC=joe,DC=com
>member: CN=SUPPORT_388945a0,CN=Users,DC=joe,DC=com
>member: CN=SUPPORT_388945a0,CN=Users,DC=joe,DC=com
dn:CN=TelnetClients,CN=Users,DC=joe,DC=com
dn:CN=WINS Users,CN=Users,DC=joe,DC=com
dn:CN=DHCP Users,CN=Users,DC=joe,DC=com
dn:CN=DHCP
Administrators,CN=Users,DC=joe,DC=com
dn:CN=Administrators,CN=Builtin,DC=joe,DC=com
>member: CN=Domain Admins,CN=Users,DC=joe,DC=com
>member: CN=Enterprise Admins,CN=Users,DC=joe,DC=com
>member: CN=Administrator,CN=Users,DC=joe,DC=com
>member: CN=Domain Admins,CN=Users,DC=joe,DC=com
>member: CN=Enterprise Admins,CN=Users,DC=joe,DC=com
>member: CN=Administrator,CN=Users,DC=joe,DC=com
dn:CN=Users,CN=Builtin,DC=joe,DC=com
>member: CN=Domain Users,CN=Users,DC=joe,DC=com
>member: CN=Domain Users,CN=Users,DC=joe,DC=com
dn:CN=Guests,CN=Builtin,DC=joe,DC=com
>member: CN=Domain Guests,CN=Users,DC=joe,DC=com
>member: CN=Guest,CN=Users,DC=joe,DC=com
>member: CN=Domain Guests,CN=Users,DC=joe,DC=com
>member: CN=Guest,CN=Users,DC=joe,DC=com
<SNIP>
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Christine Easton
Sent: Friday, June 04, 2004 12:43 PM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] Scripts
Can anyone point me
to a script for Active Directory that will give me what groups I have and the
users in them? Thanks
-Christine
