Hi Aaron, this is simple, you can either do a LDAP-Query against the members attribute of the group using different utilities, or use dsget which does the work for you:
Using the groups DistinguishedName: dsget group cn=mygroup,cn=users,dc=mydomain,dc=com -members or via the groups name dsquery group domainroot -name mygroup | dsget group -members Gruesse - Sincerely, Ulf B. Simon-Weidner MVP-Book "Windows XP - Die Expertentipps": http://tinyurl.com/44zcz Weblog: http://msmvps.org/UlfBSimonWeidner Website: http://www.windowsserverfaq.org Profile: http://mvp.support.microsoft.com/profile=35E388DE-4885-4308-B489-F2F1214C811 D |-----Original Message----- |From: [EMAIL PROTECTED] [mailto:ActiveDir- |[EMAIL PROTECTED] On Behalf Of Aaron Seet |Sent: Friday, November 25, 2005 11:53 AM |To: ActiveDir@mail.activedir.org |Subject: [ActiveDir] Query out all user members in nested groups | |I am trying to find a way to list all user accounts that are members of a |given group, _including_ those in nested groups. I didn't find anything useful |in my cache of historical LDAP emails, and it seems from the internet people |are more interested in finding what groups a user has membership in - opposite |to my perspective. | |Any advice if this is possible? thanks, | |Aaron | | |List info : http://www.activedir.org/List.aspx |List FAQ : http://www.activedir.org/ListFAQ.aspx |List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/