Okay, I got it. My syntax was just slightly off. I needed this:
(&(objectClass=user)(memberof=CN=Domain Admins,CN=Users,DC=taylor,DC=k12,DC=fl,DC=us)) Instead of this: (objectClass=user)(memberof=CN=Domain Admins,CN=Users,DC=taylor,DC=k12,DC=fl,DC=us) And yes, to find members who aren't in a group I just use: (&(objectClass=user)(!memberof=CN=Domain Admins,CN=Users,DC=taylor,DC=k12,DC=fl,DC=us)) Thanks! From: Willenborg, Kevin [mailto:[email protected]] Sent: Wednesday, March 25, 2009 7:33 PM To: Active Directory Admin Issues Subject: RE: ADUC Query Not sure it helps - but I can tell you how to display all the users that are a member of a group via ADUC. -Example * Find all Users that are members of ACRImpact Users Group in the AIT CR Groups OU in the target.local domain (objectCategory=user)(memberOf=CN=ACRImpact,OU=Groups,OU=CR,DC=target,DC=local) So I don't see why you couldn't (objectCategory=user)(!memberOf=CN=ACRImpact,OU=Groups,OU=CR,DC=target,DC=local) (keep mind this would also show contacts, computers, groups and everything else that is not in the group so you might want to add more logic to the search like object class you're looking for) Kevin Willenborg Lead Directory Services AIT (AEGON Information Technology) Phone (319) 355-6597 Nextel (319) 533-7851 Email: [email protected] Real integrity is doing the right thing, knowing that nobody's going to know whether you did it or not. CONFIDENTIALITY NOTICE The documents accompanying this transmission contain information belonging to the Sender which is legally privileged and confidential. The information is intended only for the use of the individual or entity named above. If the reader of this message is not the intended recipient, you are hereby notified that any disclosure, dissemination, distribution, copying, or the taking of any action in reliance on the contents of this information is strictly prohibited. If you have received this communication in error, please notify the sender immediately. -----Original Message----- From: John Hornbuckle [mailto:[email protected]] Sent: Wednesday, March 25, 2009 1:15 PM To: Active Directory Admin Issues Subject: ADUC Query Being a small shop, I don't use ADUC queries very often--so forgive my ignorance! I need a query of all users who are NOT in a certain group. For the life of me, I can't quite figure out how to get that one. Can someone point me in the right direction? I would think this would be relatively simple, but I've tried several different queries and just can't get them to work. John Hornbuckle MIS Department Taylor County School District 318 North Clark Street Perry, FL 32347 www.taylor.k12.fl.us ~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~ ~ <http://www.sunbelt-software.com/product.cfm?id=400> ~ ~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~ ~ <http://www.sunbelt-software.com/product.cfm?id=400> ~ ~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~ ~ ~ ~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~ ~ <http://www.sunbelt-software.com/product.cfm?id=400> ~
