Support
 
Phone Get Quote
 
Support
 
US: +1 888 720 9500
US: +1 888 791 1189
Intl: +1 925 924 9500
Aus: +1 800 631 268
UK: 0800 028 6590
CN: +86 400 660 8680

Direct Inward Dialing: +1 408 916 9892

How to generate a report on Active Directory group membership

Monitoring group memberships help administrators detect unauthorized addition of users in a group. This will in turn help protect critical company data from falling into the wrong hands.Therefore it is essential for administrators to monitor group memberships continuously.

This article compares the methods of retrieving group membership information using Windows PowerShell and ADManager Plus, a comprehensive Active Directory management solution.

Using Windows PowerShell

  • Identify the domain you need the report from.
  • Determine the attributes you need. For example, the Distinguished Name(DN), SamAccountName and so on.
  • Find the DC that contains the relevant information.
  • Write the code. A sample has been included at the end of this section.
  • Compile the script.
  • Execute it in PowerShell.
  • You can add the Export command to export the report in the format you choose.
  • To obtain the script in a different format, modify the script accordingly.

Sample Windows PowerShell script

Get-ADGroupMember -identity “Domain Controllers” | select name | Export-csv -path C:OutputGroupmembers.csv -NoTypeInformation
 Copied
Click to copy entire script

Using ADManager Plus

  • In ADManager Plus console, go to Reports>Group Reports>Group Members.
  • Find the relevant domain and OU.
  • Click Export to export the report in the different formats available (CSV, PDF. HTML, CSVDE, XLSX)

Screenshot:

powershell-get-ad-user-group-membership-1

The downsides of using Windows PowerShell to get data about group membership:

  • PowerShell scripts can be executed only from the computers which have Active Directory Domain Services role.
  • Applying filters would increase the complexity of the script.
  • To export the report in other formats, the script will have to be modified.

On the other hand, ADManager Plus gets you the required details with just a few clicks. Also, this solution helps administrators manage the network and keep it secure by generating reports on all AD objects. It can also help the administrators automate several routine tasks such as user creation, password management and so on.

  • Avoid complex PowerShell-scripting, and simplify AD change auditing with ADAudit Plus.
  •  
  • By clicking 'Get Your Free Trial', you agree to processing of personal data according to the Privacy Policy.
  •  
  • Thanks!
  • Your download is in progress and it will be completed in just a few seconds! If you face any issues, download manually here.

Related Resources

ADAudit Plus Trusted By