AD Group Report

[plock]

Afternoon all,

 

I've looked at various AD reporting tools, all of which cost money! The end of the financial year is screaming and no money is left spare!

 

What AD reporting tools do you use? In particular I need a report on our Distribution Groups. Administration would like a report of all our Distribution Groups and what members they have.

 

I can't find anything simple, and free to do this!

 

Anyone got any recommendations?

 

Thanks for your time!

[sahmeepee]

You could do it with a batch file (your choice of scripting language). I would probably do it with plain old commandline batch:

 

dsquery group -name "ICT Team" | dsget group -members | dsget user -display

 

Of course it can be tarted up, HTML-ified and shoved to a shared location on a schedule etc.

 

Alternatively, you could spend a bit of time on it and build an ASP page which has some ADSI query magic in it to return the same information.

[SYNACK]

I would recommend ADSI via vbs or asp to grab this information. You may be interested in this post where I discussed a few references and a automated tool (ADSI Scriptomatic) that can do stuff like this. I also chucked some sample code in there that might also be handy.

[Wiseman82]

I've wrote this for you:

 

http://www.wisesoft.co.uk/Scripts/display_script.aspx?id=228

 

It should do what you want...and a little bit more.

 

The script will create a csv file listing all the groups in the domain and the members of those groups. It will list the group type (domain local security,global security, universal security, domain local distribution etc.), the member type (user,contact,group), the ADsPath for the user/group, a friendly name for the group (sAMAccountName) and a friendly name for the member (sAMAccountName or Name).

 

Instructions - Save as a "VBS" file and run!

 

Let me know if you have any problems.

[plock]

Thanks everyone!

 

Brilliant 'Wiseman82' exactly what I need!