Report in Active Directory

  • Thread starter Thread starter Diane Walker
  • Start date Start date
D

Diane Walker

We have a Windows 2003 server. Is there a way to run a report for the users
in one particular group in Active Directory? Do you have to have Domain
Admin permission to run this type of report? Thanks.
 
do you just want to query the members of some group?

if yes, every authenticated user can query AD for info assuming permissions
are set correctly. AND authenticated users have a crap load of VIEW/READ
permissions

if not, can you be more specific about what you want?


--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
 
I want to query the members of some groups and print the report. How do you
query the members of some groups and print the report? Thanks.

"Jorge de Almeida Pinto [MVP - DS]"
 
ADFIND -b "<GROUP DN>" member

example:
adfind -b "cn=administrators,cn=builtin,dc=ad,dc=lan" member

D:\TOOLS\MISC>adfind -b "cn=administrators,cn=builtin,dc=ad,dc=lan" member

AdFind V01.31.00cpp Joe Richards ([email protected]) March 2006

Using server: RDC01.AD.LAN:389
Directory: Windows Server 2003

dn:CN=Administrators,CN=Builtin,DC=AD,DC=LAN
member: CN=Domain Admins,CN=Users,DC=AD,DC=LAN
member: CN=Enterprise Admins,CN=Users,DC=AD,DC=LAN
member: CN=Administrator,CN=Users,DC=AD,DC=LAN


1 Objects returned

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
Diane Walker said:
I want to query the members of some groups and print the report. How do
you query the members of some groups and print the report? Thanks.

"Jorge de Almeida Pinto [MVP - DS]"
do you just want to query the members of some group?

if yes, every authenticated user can query AD for info assuming
permissions are set correctly. AND authenticated users have a crap load
of VIEW/READ permissions

if not, can you be more specific about what you want?


--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
 
Thanks very much for your prompt response. Where can I find the ADFIND
command? Thanks.

"Jorge de Almeida Pinto [MVP - DS]"
ADFIND -b "<GROUP DN>" member

example:
adfind -b "cn=administrators,cn=builtin,dc=ad,dc=lan" member

D:\TOOLS\MISC>adfind -b "cn=administrators,cn=builtin,dc=ad,dc=lan" member

AdFind V01.31.00cpp Joe Richards ([email protected]) March 2006

Using server: RDC01.AD.LAN:389
Directory: Windows Server 2003

dn:CN=Administrators,CN=Builtin,DC=AD,DC=LAN
member: CN=Domain Admins,CN=Users,DC=AD,DC=LAN
member: CN=Enterprise Admins,CN=Users,DC=AD,DC=LAN
member: CN=Administrator,CN=Users,DC=AD,DC=LAN


1 Objects returned

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
Diane Walker said:
I want to query the members of some groups and print the report. How do
you query the members of some groups and print the report? Thanks.

"Jorge de Almeida Pinto [MVP - DS]"
 
joeware.net

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
Diane Walker said:
Thanks very much for your prompt response. Where can I find the ADFIND
command? Thanks.

"Jorge de Almeida Pinto [MVP - DS]"
ADFIND -b "<GROUP DN>" member

example:
adfind -b "cn=administrators,cn=builtin,dc=ad,dc=lan" member

D:\TOOLS\MISC>adfind -b "cn=administrators,cn=builtin,dc=ad,dc=lan"
member

AdFind V01.31.00cpp Joe Richards ([email protected]) March 2006

Using server: RDC01.AD.LAN:389
Directory: Windows Server 2003

dn:CN=Administrators,CN=Builtin,DC=AD,DC=LAN
member: CN=Domain Admins,CN=Users,DC=AD,DC=LAN
member: CN=Enterprise Admins,CN=Users,DC=AD,DC=LAN
member: CN=Administrator,CN=Users,DC=AD,DC=LAN


1 Objects returned

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
Diane Walker said:
I want to query the members of some groups and print the report. How do
you query the members of some groups and print the report? Thanks.

"Jorge de Almeida Pinto [MVP - DS]"
do you just want to query the members of some group?

if yes, every authenticated user can query AD for info assuming
permissions are set correctly. AND authenticated users have a crap load
of VIEW/READ permissions

if not, can you be more specific about what you want?


--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
 
Thank you.

"Jorge de Almeida Pinto [MVP - DS]"
joeware.net

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
Diane Walker said:
Thanks very much for your prompt response. Where can I find the ADFIND
command? Thanks.

"Jorge de Almeida Pinto [MVP - DS]"
ADFIND -b "<GROUP DN>" member

example:
adfind -b "cn=administrators,cn=builtin,dc=ad,dc=lan" member

D:\TOOLS\MISC>adfind -b "cn=administrators,cn=builtin,dc=ad,dc=lan"
member

AdFind V01.31.00cpp Joe Richards ([email protected]) March 2006

Using server: RDC01.AD.LAN:389
Directory: Windows Server 2003

dn:CN=Administrators,CN=Builtin,DC=AD,DC=LAN
member: CN=Domain Admins,CN=Users,DC=AD,DC=LAN
member: CN=Enterprise Admins,CN=Users,DC=AD,DC=LAN
member: CN=Administrator,CN=Users,DC=AD,DC=LAN


1 Objects returned

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
I want to query the members of some groups and print the report. How do
you query the members of some groups and print the report? Thanks.

"Jorge de Almeida Pinto [MVP - DS]"
message do you just want to query the members of some group?

if yes, every authenticated user can query AD for info assuming
permissions are set correctly. AND authenticated users have a crap
load of VIEW/READ permissions

if not, can you be more specific about what you want?


--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
 
Back
Top