List of all users and their group membership

[tim.cole]

Hi all. I have a problem where I am trying to output every user
(display name) (not disabled) and list their respective group
memberships (all group memberships including nested and primary). I see
alot of the reverse (list of users for a group) and alot of scipts that
return this information for 1 user that's specified..... I need it for
the entire domain.... I think I have tried 50 things to no avail. I
appreciate any help that anyone can give. Thanks.

 

[Steven L Umbach]

If you have an XP Pro computer in the domain try installing the adminpak
from Windows 2003 on it [see link below] and then see if you can do what you
want with the AD command line tools. You could also use a Windows 2003
domain controller but since this is a Windows 2000 newsgroup I assume that
is not the case for you. --- Steve

http://www.microsoft.com/downloads/...15-c8f4-47ef-a1e4-a8dcbacff8e3&DisplayLang=en
http://www.jsifaq.com/SUBO/tip7300/rh7337.htm -- see dsget user and
the -memberof and -expand switches

 

[tim.cole]

I only see where this will work on 1 Ou at a time... not the entire
domain..... is this correct?

 

[Steven L Umbach]

I should have mentioned this before but what you could try is to pipe the
output of dsquery user to dsget. This gives you a lot of possibilities in
your searches. Just put a | between the commands. The link below gives an
example of piping the commands. You should be able to use dsquery user to
enumerate all users in the domain. --- Steve

http://www.windowsitpro.com/Article/ArticleID/40447/40447.html