Wow, thanks guys. I didn't mean to give anyone a task. But, I
appreciate it.
Bill
Steven Peck wrote:
I believe the original request was for groups a user account is a memberof.
If you want to get group membership and nested group membership I
think you would have to go with a top down approach and then
compare/soprt etc. (note, I could easily be wrong here)
get-qadgroupmember "Group Name" -indirect
So, Eric and I played a bit more with the original request to get it
slightly more usable.
-----------------
1. $users =
2. foreach ($user in $users) {
3. ($User).displayname;(Get-QADUser $user).memberof | Get-QADGroup |
ForEach-Object { $_.name}
4. }
-----------------
This gets you the Display Name of the user in question and a list of
groups they are a memberof as reported in the memberof tab.
for the $user you could input in a variety of ways.
$users = get-content "c:\userlist.txt"
$users = Get-QADGroupMember "Domain Users"
To make it prettier you'd want to play with the output formatting a
bit. Maybe add a write-host " " for a blank line at the end of the
loop for something basic.
If you don't have PowerShell setup:
http://www.blkmtn.org/setting-up-a-PowerShell-environment
List of two nice starter tutorials:
http://www.blkmtn.org/powershell-tutorial-series
I am sure there is a 'neater'/more complete way to do this with
PowerShell but this is what we could toss together in the short run.
Steven Peck
http://www.blkmtn.org
On Thu, Jun 12, 2008 at 9:56 AM, KenM <[EMAIL PROTECTED]> wrote:
Just a word of warning if you decide to use this. This will not get the
users Primary group or any nested groups the users may belong to. I do not
know PS well enough to tell you how to get those but would be interested to
see how this is done with PS if anyone knows.
On Thu, Jun 12, 2008 at 12:06 PM, Steven Peck <[EMAIL PROTECTED]> wrote:
With PowerShell and the Quest AD cmdlets it would be more along the lines
of
------------
$user = "juser"
(get-QADuser $user ).memberof | get-qadgroup | select-object Name |
export-cvs ./report.csv
-------------
To do all the users you could loop through them from a list or an AD
query with Get-QADuser. If you used the list you would avoid random
service accounts, unless your users are in a specific OU and you did
the Get-QADuser on that specific OU.
Steven Peck
http://www.blkmtn.org
On Thu, Jun 12, 2008 at 8:13 AM, Eric Woodford <[EMAIL PROTECTED]>
wrote:
I've used this tool with decent success.. I think it is more Exchange
focused, but might do your job for AD groups too.. Otherwise PowerShell
and
something like get-qadGroup "Groupname" could do it in a rough format..
http://www.imanami.com/products/smartr/
On Thu, Jun 12, 2008 at 7:58 AM, wjh <[EMAIL PROTECTED]> wrote:
Hi all,
We have a client that will require quarterly reports regarding AD users
and the groups to which they belong. Is there an easy and possibly
free
tool out there to provide a legible list of users and the groups the
user is
in. This isn't any big enterprise AD environment. Only about 30 users
who
are currently on an SBS. I know there are a couple of dsquery commands
that
will list users and groups, but that doesn't really seem to get me very
close to providing a list that basically says this user has these
memberships, this user has these memberships, and have it organized by
OU.
I just don't want to spend a few hours exporting the info and cutting
and
pasting to a report so that it is discernible to someone else outside
of the
AD admin...especially if they will require this quarterly.
Thanks for any help.
Bill
~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~
~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~
~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~
~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~
~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
