Dump Domain Admins group to text?

[Ferdie]

Does anyone know how to dump the Domain Admins group to a text file? I'm
trying to use adfind, but I'm not much of an LDAP querier.

 

[Steven L Umbach]

Try the command [ net group "domain admins" ]. You could pipe it to a text
file as in net group "domain admins">file.txt. If you install adminpak for
Windows 2003 on a Windows XP Pro domain computer you can also use the AD
command line tools on that computer such as dsquery and dsget for groups as
described in the links below. --- Steve

http://www.microsoft.com/technet/pr...elp/46ba1426-43fd-4985-b429-cd53d3046f01.mspx
http://www.microsoft.com/technet/pr...elp/96a4a5ee-ee72-44d5-845f-71b2de33d441.mspx

 

[Ferdie]

Win2k only right now.

THANKS!

Try the command [ net group "domain admins" ]. You could pipe it to a text
file as in net group "domain admins">file.txt. If you install adminpak
for Windows 2003 on a Windows XP Pro domain computer you can also use the
AD command line tools on that computer such as dsquery and dsget for
groups as described in the links below. --- Steve

http://www.microsoft.com/technet/pr...elp/46ba1426-43fd-4985-b429-cd53d3046f01.mspx
http://www.microsoft.com/technet/pr...elp/96a4a5ee-ee72-44d5-845f-71b2de33d441.mspx

Does anyone know how to dump the Domain Admins group to a text file? I'm
trying to use adfind, but I'm not much of an LDAP querier.

 

[Steven L Umbach]

Hi Ferdie.

I should have been more specific. If you have an XP Pro computer in your
Windows 2000 domain you can use it as I described to use the AD command line
tools AND intall Group Policy Management Console on it to make it much
easier and give you many more options to manage your Group Policy in a
Windows 2000 domain. Admipak for Windows 2003 is a free download from
Microsoft. --- Steve

Win2k only right now.

THANKS!

Try the command [ net group "domain admins" ]. You could pipe it to a
text file as in net group "domain admins">file.txt. If you install
adminpak for Windows 2003 on a Windows XP Pro domain computer you can
also use the AD command line tools on that computer such as dsquery and
dsget for groups as described in the links below. --- Steve

http://www.microsoft.com/technet/pr...elp/46ba1426-43fd-4985-b429-cd53d3046f01.mspx
http://www.microsoft.com/technet/pr...elp/96a4a5ee-ee72-44d5-845f-71b2de33d441.mspx

Does anyone know how to dump the Domain Admins group to a text file?
I'm trying to use adfind, but I'm not much of an LDAP querier.

 

[Ferdie]

It seems like the most simple things are so hard to find a solution for.
The Net Group command serves my needs well.

I haven't explored the adminpak for 2k3 yet. Finding the right command to
do the same looks daunting using dsquery. Although it might be more
powerful, the simple solution works well.

Thanks,
Ferdie

Hi Ferdie.

I should have been more specific. If you have an XP Pro computer in your
Windows 2000 domain you can use it as I described to use the AD command
line tools AND intall Group Policy Management Console on it to make it
much easier and give you many more options to manage your Group Policy in
a Windows 2000 domain. Admipak for Windows 2003 is a free download from
Microsoft. --- Steve

Win2k only right now.

THANKS!

Try the command [ net group "domain admins" ]. You could pipe it to a
text file as in net group "domain admins">file.txt. If you install
adminpak for Windows 2003 on a Windows XP Pro domain computer you can
also use the AD command line tools on that computer such as dsquery and
dsget for groups as described in the links below. --- Steve

http://www.microsoft.com/technet/pr...elp/46ba1426-43fd-4985-b429-cd53d3046f01.mspx
http://www.microsoft.com/technet/pr...elp/96a4a5ee-ee72-44d5-845f-71b2de33d441.mspx

Does anyone know how to dump the Domain Admins group to a text file?
I'm trying to use adfind, but I'm not much of an LDAP querier.

 

[Jorge_de_Almeida_Pinto]

Does anyone know how to dump the Domain Admins group to a text
file? I'm
trying to use adfind, but I'm not much of an LDAP querier.

Try:

adfind -b "CN=Domain Admins,CN=USERS,DC=<DOMAIN>,DC=<TLD>" member

Cheers,