Get-ADGroupMember -Identity syntax

Question

Hi All

I have an AD group, it has many subgroups and users, for example
Group1 is my AD group. it has many groups and users added to it, i want to export users and groups residing in it to csv file.
Lets say Group1 has below groups and users and i want the output as in the below format.

Group2
user1
user2
group4

will the below syntax work for me.

Get-ADGroupMember -Identity "group1" -Recursive | Get-ADUser -Properties Name,Description,UserprincipalName,SamAccountName,office,Department | Select Name,Description,UserprincipalName,SamAccountName,office,Department | Export-CSV -Path C:\temp\output.csv -NoTypeInformation

Answer 1

It looks okay to me. Why not run it and see?

I'm not a big fan of "one-liners", though. I'd have probably written it like this:

$props = "Name,Description,UserprincipalName,SamAccountName,office,Department" -split ','

Get-ADGroupMember -Identity "group1" -Recursive | 
    Get-ADUser -Properties $props | 
        Select-Object $props | 
            Export-CSV -Path C:\temp\output.csv -NoTypeInformation

Answer 2

Rich, your syntax works perfectly but my requirement is not to fetch all users from subgroups.
Lets say Group1 has two subgroups and users

Group2
user2
group3
user3

The output i am getting is the list of all users of group2 and group3. i dont to fetch users from group2 and group3. i want to just now how many subgroups and users are in group1.

Answer 3

if i remove recursive switch i am getting below error

Get-ADUser : Cannot find an object with identity: 'CN=Group1,OU=MYOU,DC=mydomain,DC=com' under: 'DC=mydomain,DC=com'.
At line:4 char:2

• Get-ADUser -Properties $props |
• ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
• CategoryInfo : ObjectNotFound: (CN=Group1...-now,DC=com:ADUser) [Get-ADUser], ADIdentityNotFoundException
• FullyQualifiedErrorId : ActiveDirectoryCmdlet:Microsoft.ActiveDirectory.Management.ADIdentityNotFoundException,Microsoft.ActiveDirectory.Management.Commands.GetADUser

Answer 4

See if this works better for you (I haven't tested it, though):

$props = "Name,Description,UserprincipalName,SamAccountName,office,Department,ObjectCategory" -split ','

(Get-ADGroup -Identity "group1").Members | 
    Get-ADObject -Properties $props | 
        Select-Object $props | 
            Export-CSV -Path C:\temp\output.csv -NoTypeInformation

Answer 5

this doesnot give any output