Report in Active Directory

D

Diane Walker

We have a Windows 2003 server. Is there a way to run a report for the users
in one particular group in Active Directory? Do you have to have Domain
Admin permission to run this type of report? Thanks.
 
J

Jorge de Almeida Pinto [MVP - DS]

do you just want to query the members of some group?

if yes, every authenticated user can query AD for info assuming permissions
are set correctly. AND authenticated users have a crap load of VIEW/READ
permissions

if not, can you be more specific about what you want?


--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
 
D

Diane Walker

I want to query the members of some groups and print the report. How do you
query the members of some groups and print the report? Thanks.

"Jorge de Almeida Pinto [MVP - DS]"
 
J

Jorge de Almeida Pinto [MVP - DS]

ADFIND -b "<GROUP DN>" member

example:
adfind -b "cn=administrators,cn=builtin,dc=ad,dc=lan" member

D:\TOOLS\MISC>adfind -b "cn=administrators,cn=builtin,dc=ad,dc=lan" member

AdFind V01.31.00cpp Joe Richards ([email protected]) March 2006

Using server: RDC01.AD.LAN:389
Directory: Windows Server 2003

dn:CN=Administrators,CN=Builtin,DC=AD,DC=LAN
member: CN=Domain Admins,CN=Users,DC=AD,DC=LAN
member: CN=Enterprise Admins,CN=Users,DC=AD,DC=LAN
member: CN=Administrator,CN=Users,DC=AD,DC=LAN
Click to expand...


1 Objects returned

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
Diane Walker said:
I want to query the members of some groups and print the report. How do
you query the members of some groups and print the report? Thanks.

"Jorge de Almeida Pinto [MVP - DS]"
do you just want to query the members of some group?

if yes, every authenticated user can query AD for info assuming
permissions are set correctly. AND authenticated users have a crap load
of VIEW/READ permissions

if not, can you be more specific about what you want?


--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
Click to expand...
Click to expand...
 
D

Diane Walker

Thanks very much for your prompt response. Where can I find the ADFIND
command? Thanks.

"Jorge de Almeida Pinto [MVP - DS]"
ADFIND -b "<GROUP DN>" member

example:
adfind -b "cn=administrators,cn=builtin,dc=ad,dc=lan" member

D:\TOOLS\MISC>adfind -b "cn=administrators,cn=builtin,dc=ad,dc=lan" member

AdFind V01.31.00cpp Joe Richards ([email protected]) March 2006

Using server: RDC01.AD.LAN:389
Directory: Windows Server 2003

dn:CN=Administrators,CN=Builtin,DC=AD,DC=LAN
member: CN=Domain Admins,CN=Users,DC=AD,DC=LAN
member: CN=Enterprise Admins,CN=Users,DC=AD,DC=LAN
member: CN=Administrator,CN=Users,DC=AD,DC=LAN
Click to expand...


1 Objects returned

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
Diane Walker said:
I want to query the members of some groups and print the report. How do
you query the members of some groups and print the report? Thanks.

"Jorge de Almeida Pinto [MVP - DS]"
Click to expand...
Click to expand...
 
J

Jorge de Almeida Pinto [MVP - DS]

joeware.net

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
Diane Walker said:
Thanks very much for your prompt response. Where can I find the ADFIND
command? Thanks.

"Jorge de Almeida Pinto [MVP - DS]"
ADFIND -b "<GROUP DN>" member

example:
adfind -b "cn=administrators,cn=builtin,dc=ad,dc=lan" member

D:\TOOLS\MISC>adfind -b "cn=administrators,cn=builtin,dc=ad,dc=lan"
member

AdFind V01.31.00cpp Joe Richards ([email protected]) March 2006

Using server: RDC01.AD.LAN:389
Directory: Windows Server 2003

dn:CN=Administrators,CN=Builtin,DC=AD,DC=LAN
member: CN=Domain Admins,CN=Users,DC=AD,DC=LAN
member: CN=Enterprise Admins,CN=Users,DC=AD,DC=LAN
member: CN=Administrator,CN=Users,DC=AD,DC=LAN
Click to expand...


1 Objects returned

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
Diane Walker said:
I want to query the members of some groups and print the report. How do
you query the members of some groups and print the report? Thanks.

"Jorge de Almeida Pinto [MVP - DS]"
do you just want to query the members of some group?

if yes, every authenticated user can query AD for info assuming
permissions are set correctly. AND authenticated users have a crap load
of VIEW/READ permissions

if not, can you be more specific about what you want?


--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
Click to expand...
Click to expand...
Click to expand...
 
D

Diane Walker

Thank you.

"Jorge de Almeida Pinto [MVP - DS]"
joeware.net

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
Diane Walker said:
Thanks very much for your prompt response. Where can I find the ADFIND
command? Thanks.

"Jorge de Almeida Pinto [MVP - DS]"
ADFIND -b "<GROUP DN>" member

example:
adfind -b "cn=administrators,cn=builtin,dc=ad,dc=lan" member

D:\TOOLS\MISC>adfind -b "cn=administrators,cn=builtin,dc=ad,dc=lan"
member

AdFind V01.31.00cpp Joe Richards ([email protected]) March 2006

Using server: RDC01.AD.LAN:389
Directory: Windows Server 2003

dn:CN=Administrators,CN=Builtin,DC=AD,DC=LAN
member: CN=Domain Admins,CN=Users,DC=AD,DC=LAN
member: CN=Enterprise Admins,CN=Users,DC=AD,DC=LAN
member: CN=Administrator,CN=Users,DC=AD,DC=LAN


1 Objects returned

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
I want to query the members of some groups and print the report. How do
you query the members of some groups and print the report? Thanks.

"Jorge de Almeida Pinto [MVP - DS]"
message do you just want to query the members of some group?

if yes, every authenticated user can query AD for info assuming
permissions are set correctly. AND authenticated users have a crap
load of VIEW/READ permissions

if not, can you be more specific about what you want?


--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
Click to expand...
Click to expand...
Click to expand...
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Users in a Group 5
Cant access active directory in win XP/win 2003 with a win 2003 PD 4
Active Directory root server problem 1
Default Access Permissions to Active Directory 1
Upgrade question from windows 2000 AD to 2003 AD 4
Compare Users in AD and Novell 3
unable to remove Active Directory using dcpromo on a Windows 2003 Server with sp1 installed 15
sharing documentation on active directory 1

Top