Extract user group membership details

Hi,

I looking for tool or script which can extract user belonging to which group
precisely user group membership details.

Please let me know if anyone has come across script or tool. thanks

Hello Ezakial,

Check out this script:
http://www.microsoft.com/technet/scr....mspx?mfr=true

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi,
>
> I looking for tool or script which can extract user belonging to which
> group precisely user group membership details.
>
> Please let me know if anyone has come across script or tool. thanks
>

Can you provide some more details? For example, do you need to run this for
a single user or multiple users? Do you need to run this interactively or on
a scheduled basis?

The Directory Services tools from Microsoft, which are included with WS03
and WS08, will give you group membership details.

If you want to list the immediate groups that a user belongs to, you can use
the following command:

dsget user <UserDN> -memberof

If you want to list all groups that a user belongs to (including groups by
virtual of nesting), you can use the following command:

dsget user <UserDN> -memberof -expand

If you want to run either of these for multiple users, then you need to
create a text file that contains the DNs of each user, one per line, and
then run the following command:

for /f "delims=*" %i in (List.txt) do dsget user %i -memberof -expand
>>Results.txt

Notes:
Replace <UserDN> with the distinguished name of the user in the first two
commands.
Replace (List.txt) with the name of the text file that contains the user DNs
in the third command.
If you want to run the third command in a batch file, replace %i with %%i

--

JPolicelli, MVP - Directory Services

http://www.policelli.com
http://policelli.com/blog

This posting is provided AS IS with no warranties and confers no rights.
Always plan and test.

----

"Ezakial" <Ezakial@discussions.microsoft.com> wrote in message
news:CF083CB6-D176-427B-B50B-03491545663E@microsoft.com...
> Hi,
>
> I looking for tool or script which can extract user belonging to which
> group
> precisely user group membership details.
>
> Please let me know if anyone has come across script or tool. thanks

Thanks JPolicelli,
I needed to run this for multiple users and this would be for

interactively.Thank you very much... :)

> Can you provide some more details? For example, do you need to run this for
> a single user or multiple users? Do you need to run this interactively or on
> a scheduled basis?
>
> The Directory Services tools from Microsoft, which are included with WS03
> and WS08, will give you group membership details.
>
> If you want to list the immediate groups that a user belongs to, you can use
> the following command:
>
> dsget user <UserDN> -memberof
>
> If you want to list all groups that a user belongs to (including groups by
> virtual of nesting), you can use the following command:
>
> dsget user <UserDN> -memberof -expand
>
> If you want to run either of these for multiple users, then you need to
> create a text file that contains the DNs of each user, one per line, and
> then run the following command:
>
> for /f "delims=*" %i in (List.txt) do dsget user %i -memberof -expand
> >>Results.txt
>
> Notes:
> Replace <UserDN> with the distinguished name of the user in the first two
> commands.
> Replace (List.txt) with the name of the text file that contains the user DNs
> in the third command.
> If you want to run the third command in a batch file, replace %i with %%i
>
> --
>
> JPolicelli, MVP - Directory Services
>
> http://www.policelli.com
> http://policelli.com/blog
>
> This posting is provided AS IS with no warranties and confers no rights.
> Always plan and test.
>
> ----
>
> "Ezakial" <Ezakial@discussions.microsoft.com> wrote in message
> news:CF083CB6-D176-427B-B50B-03491545663E@microsoft.com...
> > Hi,
> >
> > I looking for tool or script which can extract user belonging to which
> > group
> > precisely user group membership details.
> >
> > Please let me know if anyone has come across script or tool. thanks
>

I have an example VBScript program to document all groups (and their
membership) in a domain linked here:

http://www.rlmueller.net/Document%20Domain%20Groups.htm

Another example VBScript program that documents a single specified group:

http://www.rlmueller.net/List%20Memb...0a%20Group.htm

This example documents direct members, membership due to group nesting, and
membership in the "primary" group (both direct and nested). Finally, this
example documents all group a user is a member of (except their "primary"
group):

http://www.rlmueller.net/List%20User%20Groups.htm

--
Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--

"Ezakial" <Ezakial@discussions.microsoft.com> wrote in message
news:DCFDCF87-0071-4453-9190-E4E14ED6EC33@microsoft.com...
> Thanks JPolicelli,
> I needed to run this for multiple users and this would be for
>
> interactively.Thank you very much... :)
>
>> Can you provide some more details? For example, do you need to run this
>> for
>> a single user or multiple users? Do you need to run this interactively or
>> on
>> a scheduled basis?
>>
>> The Directory Services tools from Microsoft, which are included with WS03
>> and WS08, will give you group membership details.
>>
>> If you want to list the immediate groups that a user belongs to, you can
>> use
>> the following command:
>>
>> dsget user <UserDN> -memberof
>>
>> If you want to list all groups that a user belongs to (including groups
>> by
>> virtual of nesting), you can use the following command:
>>
>> dsget user <UserDN> -memberof -expand
>>
>> If you want to run either of these for multiple users, then you need to
>> create a text file that contains the DNs of each user, one per line, and
>> then run the following command:
>>
>> for /f "delims=*" %i in (List.txt) do dsget user %i -memberof -expand
>> >>Results.txt
>>
>> Notes:
>> Replace <UserDN> with the distinguished name of the user in the first two
>> commands.
>> Replace (List.txt) with the name of the text file that contains the user
>> DNs
>> in the third command.
>> If you want to run the third command in a batch file, replace %i with %%i
>>
>> --
>>
>> JPolicelli, MVP - Directory Services
>>
>> http://www.policelli.com
>> http://policelli.com/blog
>>
>> This posting is provided AS IS with no warranties and confers no rights.
>> Always plan and test.
>>
>> ----
>>
>> "Ezakial" <Ezakial@discussions.microsoft.com> wrote in message
>> news:CF083CB6-D176-427B-B50B-03491545663E@microsoft.com...
>> > Hi,
>> >
>> > I looking for tool or script which can extract user belonging to which
>> > group
>> > precisely user group membership details.
>> >
>> > Please let me know if anyone has come across script or tool. thanks
>>

In that case, you need to create a text file that contains the distinguished
name for each user, one per line. If you name the file something other than
List.txt, you need to replace (List.txt) in the below command with your file
name.

for /f "delims=*" %i in (List.txt) do dsget user %i -memberof -expand
>>Results.txt



--

JPolicelli, MVP - Directory Services

http://www.policelli.com
http://policelli.com/blog

This posting is provided AS IS with no warranties and confers no rights.
Always plan and test.

----

"Ezakial" <Ezakial@discussions.microsoft.com> wrote in message
news:DCFDCF87-0071-4453-9190-E4E14ED6EC33@microsoft.com...
> Thanks JPolicelli,
> I needed to run this for multiple users and this would be for
>
> interactively.Thank you very much... :)
>
>> Can you provide some more details? For example, do you need to run this
>> for
>> a single user or multiple users? Do you need to run this interactively or
>> on
>> a scheduled basis?
>>
>> The Directory Services tools from Microsoft, which are included with WS03
>> and WS08, will give you group membership details.
>>
>> If you want to list the immediate groups that a user belongs to, you can
>> use
>> the following command:
>>
>> dsget user <UserDN> -memberof
>>
>> If you want to list all groups that a user belongs to (including groups
>> by
>> virtual of nesting), you can use the following command:
>>
>> dsget user <UserDN> -memberof -expand
>>
>> If you want to run either of these for multiple users, then you need to
>> create a text file that contains the DNs of each user, one per line, and
>> then run the following command:
>>
>> for /f "delims=*" %i in (List.txt) do dsget user %i -memberof -expand
>> >>Results.txt
>>
>> Notes:
>> Replace <UserDN> with the distinguished name of the user in the first two
>> commands.
>> Replace (List.txt) with the name of the text file that contains the user
>> DNs
>> in the third command.
>> If you want to run the third command in a batch file, replace %i with %%i
>>
>> --
>>
>> JPolicelli, MVP - Directory Services
>>
>> http://www.policelli.com
>> http://policelli.com/blog
>>
>> This posting is provided AS IS with no warranties and confers no rights.
>> Always plan and test.
>>
>> ----
>>
>> "Ezakial" <Ezakial@discussions.microsoft.com> wrote in message
>> news:CF083CB6-D176-427B-B50B-03491545663E@microsoft.com...
>> > Hi,
>> >
>> > I looking for tool or script which can extract user belonging to which
>> > group
>> > precisely user group membership details.
>> >
>> > Please let me know if anyone has come across script or tool. thanks
>>