.NET Framework - List all Group Users in AD

Asked By Chri

29-Aug-08 02:08 PM

I'm having problems (most of which are being new to powershell!) in grabbing
a list of all groups-users in a domain.

I have played a bit w/ Quest's Active Directoy cmdlets and came up w/ the
following:
get-qadgroup |
foreach-object {get-qadgroupmember ($_)}

This, techncially does what it is suppose to do.... For every group, it
lists the members.  But, the problem is, it doesn't state the group name!!

I simple need to get a dump from AD off all group and memberships.

Thanks!

29-Aug-08 05:02 PM

I haven't got access to an AD to test it but I think that all you need to do
is make a slight modification

get-qadgroup | foreach-object {
get-qadgroupmember ($_)
}

If name doesn't work try distinguishedname

--
Richard Siddaway
All scripts are supplied "as is" and with no warranty
PowerShell MVP
Blog: http://richardsiddaway.spaces.live.com/
PowerShell User Group: http://www.get-psuguk.org.uk

29-Aug-08 05:46 PM

Awesome.  I'm almost there I think....  I figured it was my lack for
formatting output that was the hiccup......(again, I'm new :(..)

But, how would you state the group per line rather than all in one column?
So, it would like similar...
Domain Admin, Chris
Domain Admin, Joe
SQL_Group, Al
SQL_Group,Chris
Blah,blah

Thanks again for the help!!!

30-Aug-08 03:47 PM

Try this


$names = @()
Get-QADGroup | ForEach-Object {
$temp = "`n$($_.Name): "
if ($_.member -ne $null) {
foreach ($user in $_.member){
$un = $user.Split(",")
$temp += $un[0].Replace("CN=","") + ", "
}
$names += $temp.TrimEnd(", ")
}
else {$names += ($temp + "No members")}
}
$names


--
Richard Siddaway
All scripts are supplied "as is" and with no warranty
PowerShell MVP
Blog: http://richardsiddaway.spaces.live.com/
PowerShell User Group: http://www.get-psuguk.org.uk

31-Aug-08 10:37 PM

Hello chris,


Here's another way (one line):

PS > Get-QADGroup -sizeLimit 0 | select @{name="GroupName";expression={$_.name}}
-expand members | select GroupName,@{n='Member';e={ (Get-QADObject $_).name
}}

GroupName  Member
---------  ------
Group1  User1
Group1  User1
Group2  User2
Group2  User2
Group3  User3
Group3  User3


---
Shay Levy
Windows PowerShell MVP
http://blogs.microsoft.co.il/blogs/ScriptFanatic

c> I'm having problems (most of which are being new to powershell!) in
c> grabbing a list of all groups-users in a domain.
c>
c> I have played a bit w/ Quest's Active Directoy cmdlets and came up w/
c> the
c> following:
c> get-qadgroup |
c> foreach-object {get-qadgroupmember ($_)}
c> This, techncially does what it is suppose to do.... For every group,
c> it lists the members.  But, the problem is, it doesn't state the
c> group name!!
c>
c> I simple need to get a dump from AD off all group and memberships.
c>
c> Thanks!
c>

02-Sep-08 09:15 AM

Shay,
Thanks for the post and help as well.  But, when trying to run your script,
it is only pulling groups.  Your output is the exact format I'm looking to
accomplish tho!!
Thanks!
--Chris

02-Sep-08 10:10 AM

Actually..take that back.  Got it to run.
Only question is now...it looks to hate empty group as it gives this err


Select-Object : Cannot expand property "members" because it has nothing to
expand.
At line:1 char:35
+ Get-QADGroup -sizeLimit 0 | select  <<<<
@{name="GroupName";expression={$_.name}} -expand members | select GroupName,
@{n='Member';e={ (Get-QADObject $_).name


I'll play w/ it too..And, again.  Thanks!!!

05-Oct-10 06:29 AM

Hi, I'd like to get a similar output, but listed by user rather than by group.



I'm trying a combination of Get-QADUser and Get-QADMemberOF but I can't seem to work out how to combine them correctly to get the output I'm looking for.



What I'm after is:



Name    GroupName

----    ---------

User1   Group1

User1   Group3

User2   Group1

User2   Group2

User3   Group3



etc..



Can you help? :)



Thanks,

David

21-Dec-10 11:39 AM

hi David!



I'm lookin for the exactly same outup, I don't find it, and I begin feeling desperate.

Did you find it??



Thank you