You can get folks directly nested in a group by appending (memberOf=CN=MyGroup,OU=Groups,DC=MyDomain,DC=com) to the query but to handle nesting you'd have to check each user's tokengroups.
Thanks, Brian Desmond [email protected] c - 312.731.3132 From: Chyka, Robert [mailto:[email protected]] Sent: Monday, March 09, 2009 1:44 PM To: NT System Admin Issues Subject: RE: Best way to print all AD Users (SOX req) Is there a way to extract the users in that format from a specific group or groups? Thanks! ________________________________ From: Michael B. Smith [mailto:[email protected]] Sent: Monday, March 09, 2009 1:53 PM To: NT System Admin Issues Subject: RE: Best way to print all AD Users (SOX req) dsquery * domainroot -filter "(&(objectClass=user)(objectCategory=person))" -attr name samaccountname From: Marty Nelson [mailto:[email protected]] Sent: Monday, March 09, 2009 1:51 PM To: NT System Admin Issues Subject: Best way to print all AD Users (SOX req) Happy Monday all. Quick question, what's the best way to get a list of all of my AD users? It's one of the many SOX requirements that are being asked for, and it's getting old taking screen shots! Thanks, -Marty ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
