Skip to main content

Powershell Active Directory - User and Group

Recently I needed to find out if a user was in an Active Directory Group.

The group contained more than 5000 entries, so using Get-ADGroupMember wasn't useful (it timed out)

The following command worked well for me...

get-adgroup "GroupName" -Properties Member | Select-Object -ExpandProperty Member | get-aduser |
 Where-Object {$_.SamAccountName -eq "username"}

For small groups, and for full member lists it's as simple as 

Get-ADGroupMember groupname 

Getting the actual AD details can be performed with powershell with the following

get-aduser -Filter 'GivenName -like "FirstName*" -and Surname -like "LastName*"'

or, if you know the SamAccountName...

get-aduser SamAccountName


To list the groups that an account belongs to 
Get-ADPrincipalGroupMembership username | select name

Comments

Popular posts from this blog

Javascript Form Validation

It's real simple. All you need to do is call a javascript function in a html  " onsubmit " in the form tag as a javascript return, like this       <form method="post" action="dosomething.php" onsubmit="return validateForm();"> If the code completes ok, the form is then sent to the page listed in "action" http://www.w3schools.com/js/js_form_validation.asp If the function specified in the onsubmit returns false, then the form is not sent to the page mentioned in action.