Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to list all group memberships for a certain AD user?
I thought it was something like:

net user londondom\john

But this doesn't seem to work for AD users. The same command will work for local users though:

net user johnlocal

Any ideas?

share|improve this question
up vote 22 down vote accepted

Try the following. I think it only works on the currently logged-in domain:

net user john /domain
share|improve this answer
Thanks, for some reason I was trying it with the domain group before the username and it didn't like it. – Rubans Mar 21 '11 at 15:51

Write all direct groups for the account

dsquery user -samid loginname | dsget user -memberof >> groups.txt

List all group for the login account, additionally show nested groups(recursive)

dsquery user -samid loginname | dsget user -memberof -expand 
share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .