Powershell - Extract groups and users of a principal active directory group

Bernard Beaulieu 1

Hi,

I would like to get something like this from AD :
AD GROUP ‘A’
AD GROUP ‘A child’
member ‘John D’
member ‘James B’
member ‘Joe D’
Member ‘Ma D’
AD GROUP ‘A child 2’
AD GROUP ‘B’
member ‘Mark T’
member ‘Mark M’
…

How can I get something like this (or better) using Powershell

I do not only want all the users from all the AD groups

Thank you,

1 answer

Rich Matheisen 44,696 Reputation points

2022-02-08T19:59:03.253+00:00

Use Get-ADGroupMember but don't use the -Recursive parameter.
Please sign in to rate this answer.
Bernard Beaulieu 1 Reputation point

2022-02-08T20:43:15.553+00:00

This gives me groups/users member of the primary group (AD GROUP ‘A') but does not gives me users member of secondary groups.

If you refer to my example, Get-ADGroupMember tells me that "AD GROUP ‘A child’" is a member of "AD GROUP 'A'" but it does not tell me who are the users member of "AD GROUP ‘A child’".

It is not that simple.

Rich Matheisen 44,696 Reputation points

2022-02-08T20:51:56.287+00:00

It's not that hard, either!

Take the output from the Get-ADGroupMember and for each group in that list execute a Get-ADGroupMember on that group.
Sign in to comment