Tracing AD Groups

[FN-GM]

Hello,

 

I am in a new (ish) role. We have a stack of AD groups and we simply don't know what they do.

 

Does anyone know of any magic software that can help us determine what they are used for please?

 

Thanks

[ShellfishClive]

The only thing I have found for this is this link: https://devblogs.microsoft.com/scripting/hey-scripting-guy-how-can-i-use-windows-powershell-2-0-to-find-active-directory-domain-services-groups-not-being-used/

 

You'll need to read it all to understand how it works and even then it doesn't tell you everything the group does. I don't know of a specific piece of software that will tell you what an AD group does in terms of GPO, Permissions, Email etc. Seems like it's going to be a manual job of going through them all and plucking them apart.

[kennysarmy]

Note to self.

 

Add descriptions in to non-obvious AD group names !