Export multiple AD groups and 'Member of'

Question

Export multiple AD groups and 'Member of'

Nivan Jordan 1

Good Afternoon

I have multiple AD Security groups (about 9) that have other groups in it that is listed under the 'Member of' tab.

I would like to export these 9 groups into a csv that shows all the 'members of' each group.

I haven't found a proper script that is able to do this, can you help me please?

Newbie Jones 1,386 Reputation points

2022-05-26T17:27:30.477+00:00

What have you found? This is a common question.

Use Get-ADGroupMember.

Have a look at the following thread which shows a simple method on how to do recursive searches. (Or search again including the key word recursive).

https://learn.microsoft.com/en-us/answers/questions/864082/active-directory-export-users-in-security-group-wi.html
Nivan Jordan 1 Reputation point

2022-05-26T18:12:53.87+00:00

Huge thanks for your assistance and quick response.

This is the closest I found so far, I installed a module that now allows me to use 'Get-WinADGroupMemberOf'

please see the script below:

> Get-WinADGroupMemberOf 'my_adgroup_here' | select Name, objectclass

When running this, it returns the names of all the groups under the 'Member Of' tab and not the users that are under the 'Members' tab of this group.. I hope this make sense, I've attached a screenshot as well.

So in essence I have 9 AD groups that I need to export into a csv file. Each group needs to show the 'groups' it has under the 'Member Of' tab and not the users that are under the 'Members' tab.
Nivan Jordan 1 Reputation point

2022-05-26T18:47:19.6+00:00

@Newbie Jones

I forgot to add, if I add another group in the script, it outputs the 'Member Of' groups together and doesn't show which one it belongs to.

This needs to separate when doing the export to csv, to distinguish which 'Member of' belongs to which group.

See the attached screenshot.
Newbie Jones 1,386 Reputation points

2022-05-27T11:04:55.517+00:00
Still not 100% sure on what you are trying to achieve.

If you only want the groups and not the users then you can consider the following.

Get-ADGroupMember GroupA | Where-Object {$_.objectClass -eq 'Group'}

objectClass is a default attribute for Get-ADGroupMember and you can filter client side for only group objects.

This won't be recursive though if that is still a requirement.

Newbie Jones 1,386

Option 2

$list = "GroupA", "GroupB", "GroupC"  
$results=@()  
  
ForEach ($group in $list) {  
    $groups = (Get-ADGroupMember $group | Where-Object {$_.objectClass -eq 'Group'}).Name -join ','  
    $props = [ordered]@{  
        Group=$group  
        EmbeddedGroup=$groups  
    }  
    $results +=  New-Object -TypeName PSObject -property $props  
}  
              
  
$results

1 answer

Your answer

Newbie Jones 1,386 Reputation points

2022-05-26T17:27:30.477+00:00

What have you found? This is a common question.

Use Get-ADGroupMember.

Have a look at the following thread which shows a simple method on how to do recursive searches. (Or search again including the key word recursive).

https://learn.microsoft.com/en-us/answers/questions/864082/active-directory-export-users-in-security-group-wi.html
Nivan Jordan 1 Reputation point

2022-05-26T18:12:53.87+00:00

Huge thanks for your assistance and quick response.

This is the closest I found so far, I installed a module that now allows me to use 'Get-WinADGroupMemberOf'

please see the script below:

> Get-WinADGroupMemberOf 'my_adgroup_here' | select Name, objectclass

When running this, it returns the names of all the groups under the 'Member Of' tab and not the users that are under the 'Members' tab of this group.. I hope this make sense, I've attached a screenshot as well.

So in essence I have 9 AD groups that I need to export into a csv file. Each group needs to show the 'groups' it has under the 'Member Of' tab and not the users that are under the 'Members' tab.
Nivan Jordan 1 Reputation point

2022-05-26T18:47:19.6+00:00

@Newbie Jones

I forgot to add, if I add another group in the script, it outputs the 'Member Of' groups together and doesn't show which one it belongs to.

This needs to separate when doing the export to csv, to distinguish which 'Member of' belongs to which group.

See the attached screenshot.
Newbie Jones 1,386 Reputation points

2022-05-27T11:04:55.517+00:00

Still not 100% sure on what you are trying to achieve.

If you only want the groups and not the users then you can consider the following.

Get-ADGroupMember GroupA | Where-Object {$_.objectClass -eq 'Group'}

objectClass is a default attribute for Get-ADGroupMember and you can filter client side for only group objects.

This won't be recursive though if that is still a requirement.
Newbie Jones 1,386 Reputation points

2022-05-27T13:30:34.327+00:00

Option 2

$list = "GroupA", "GroupB", "GroupC" $results=@() ForEach ($group in $list) { $groups = (Get-ADGroupMember $group | Where-Object {$_.objectClass -eq 'Group'}).Name -join ',' $props = [ordered]@{ Group=$group EmbeddedGroup=$groups } $results += New-Object -TypeName PSObject -property $props } $results

Answer 1

Newbie Jones 1,386

Something like..

$groups = "GroupA", "GroupB", "GroupC"  
  
ForEach ($group in $groups) {  
    Get-ADGroupMember $group |  
        Where-Object {$_.objectClass -eq 'Group'} |  
            Select-Object @{name="Group";expression={$group}}, @{name="Embedded Group";expression={$_.Name}}  
}

Share via

Export multiple AD groups and 'Member of'

1 answer

Your answer