Is it possible to list all group memberships for a certain AD user?
I thought it was something like:

net user londondom\john

But this doesn't seem to work for AD users. The same command will work for local users though:

net user johnlocal

Any ideas?


Try the following. I think it only works on the currently logged-in domain:

net user john /domain
  • Thanks, for some reason I was trying it with the domain group before the username and it didn't like it.
    – Rubans
    Mar 21 '11 at 15:51

Write all direct groups for the account

dsquery user -samid loginname | dsget user -memberof >> groups.txt

List all group for the login account, additionally show nested groups(recursive)

dsquery user -samid loginname | dsget user -memberof -expand 
  • 1
    dsquery/dsget absent here (WinXP). Any specific packages needed? Dec 4 '16 at 1:02

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.