Using PowerShell to pull users that are in AD groups from specific OUs

Question

Using PowerShell to pull users that are in AD groups from specific OUs

Rench, Brian L 0

I need to pull a list of users that are in AD groups, but the users are in 2 specific OUs/sub OUs. What can I use in PowerShell to accomplish this?

2 answers

Your answer

Answer 1

Tushar Kumar 3,371 MVP

Hi Rench, Brian L

Replace “GroupName” with the name of the group you want to list the users for. Replace “OU1” and “OU2” with the names of the OUs

Get-ADGroupMember -Identity "GroupName" | Get-ADUser -Properties * | Where-Object {($_.DistinguishedName -like "*OU=OU1,DC=domain,DC=com*" -or $_.DistinguishedName -like "*OU=OU2,DC=domain,DC=com*") -and $_.Enabled -eq $true} | Select-Object Name,SamAccountName

Rich Matheisen 47,901 Reputation points

2023-06-22T21:31:03.61+00:00

There's no need to add "-Properties *" to the Get-ADUser cmdlet if all you're going to use are the name and samaccountname. Both of those are part of the default property set.

However, adding the distinguishedname to the Select-Object set of properties would be a good idea if there's a need to verify that the user is in the expected OU.

Answer 2

Sukhwinder Singh 51

You can use following command to generate list of all users and then in excel just filter on required OU

get-adgroupmember "groupname" | select name,samaccountname,distinguishedname | out-gridview

Share via

Using PowerShell to pull users that are in AD groups from specific OUs

2 answers

Your answer