Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Is it possible to list all group memberships for a certain AD user?
I thought it was something like:

net user londondom\john

But this doesn't seem to work for AD users. The same command will work for local users though:

net user johnlocal

Any ideas?

share|improve this question

2 Answers 2

up vote 15 down vote accepted

Try the following. I think it only works on the currently logged-in domain:

net user john /domain
share|improve this answer
    
Thanks, for some reason I was trying it with the domain group before the username and it didn't like it. –  Rubans Mar 21 '11 at 15:51

Write all direct groups for the account

dsquery user -samid loginname | dsget user -memberof >> groups.txt

List all group for the login account, additionally show nested groups(recursive)

dsquery user -samid loginname | dsget user -memberof -expand 
share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.