finding ad users who are a member of group 1 and group2

[sted]

with active directory can anyone think of an easy way of finding all users who are a member or BOTH group1 and group2 (there arnt so many users i couldnt just check them all manually but id rather not have to) as ive had odd issues where being a member of either is fine a member of both causes very long logons (i know why but thats harder to fix than just removing them from being in both groups)

[djm968]

Powershell is your friend.

 

Something like this:

 

Get-ADUser -Filter * -Properties memberOf | `

Where-Object {

$_.memberof.contains('CN=foo,OU=allsites,DC=example,DC=org') -and `

$_.memberof.contains('CN=bar,OU=allsites,DC=example,DC=org' )

}

[round2it]

i use ad manager proplus (trial has a limit of showing 100 items but for your request it is fine

 

https://www.manageengine.com/products/ad-manager/download.html