Active Directory
A set of directory-based technologies included in Windows Server.
3,963 questions
Use Get-ADGroupMember but don't use the -Recursive parameter.
Powershell - Extract groups and users of a principal active directory group
Bernard Beaulieu
1
Reputation point
Hi,
I would like to get something like this from AD :
AD GROUP ‘A’
AD GROUP ‘A child’
member ‘John D’
member ‘James B’
member ‘Joe D’
Member ‘Ma D’
AD GROUP ‘A child 2’
AD GROUP ‘B’
member ‘Mark T’
member ‘Mark M’
…
How can I get something like this (or better) using Powershell
I do not only want all the users from all the AD groups
Thank you,
1 answer
Sort by: Most helpful
-
Rich Matheisen 36,246 Reputation points
2022-02-08T19:59:03.253+00:00 Sign in to answer-
Bernard Beaulieu 1 Reputation point
2022-02-08T20:43:15.553+00:00 This gives me groups/users member of the primary group (AD GROUP ‘A') but does not gives me users member of secondary groups.
If you refer to my example, Get-ADGroupMember tells me that "AD GROUP ‘A child’" is a member of "AD GROUP 'A'" but it does not tell me who are the users member of "AD GROUP ‘A child’".
It is not that simple.
Sign in to comment -
It's not that hard, either!
Take the output from the Get-ADGroupMember and for each group in that list execute a Get-ADGroupMember on that group.