Query Domain Group Membership

The identity parameter specifies the active directory group to access.

Query domain group membership. You can also specify the group by passing a group object through the pipeline. If we want to display the list of members of a group we could try to use dsget command. Select samaccountname as login from openquery adsi select samaccountname.

Right click on the domain root and select find. Open the user properties and go to the member of tab. As martin stated the memberof tab in in aduc will list the user s group members which essentially will come from the memberof multi valued attribute for a user.

Members can be users groups and computers. Here s an example query for getting group membership. Click on field and select user member of.

If we see an. The only thing that it won t be listed is the primary group but you don t seem to be concerned with that. When troubleshooting access to your solution this gives you a quick way to rule out membership to the proper ad group as a possible issue.

Enter the name of the group you d like to include and click add. Query accounts domain groups and members who have admin membership. I have written the query as shown below.

You can identify a group by its distinguished name guid security identifier or security account manager sam account name. Now you can view this list in aduc. Adfind exe default f name domain admins member list.