ActiveDirSec.Org

The world's most trusted forum on Active Directory Security


Post Info TOPIC: How to export a list of all user and computer accounts and security groups in/from Active Directory?


Member

Posts: 7
Date: Jun 1, 2011
How to export a list of all user and computer accounts and security groups in/from Active Directory?
Permalink  
 


Hell. I am looking for an efficienct way to export a list of all user and computer, as well as all security groups and their memberships. We have a need to be able to generate a report  of all recently joined domain machines, all recently created domain user accounts, all disabled and locked accounts, and any accounts that may have failed a logon in the last 24 hours.

We also would like to document the membership of all of our admin security groups, including all nested members, so that we know what is the security state of our admin accounts and groups.

If anyone has any ideas of an efficient, reliable way to do this, please let me know.



__________________

One day I too shall have an Aston Martin Mr. Bond!

CF


Member

Posts: 8
Date: Jun 15, 2011
RE: How to export a list of all user and computer accounts and security groups in Active Directory?
Permalink  
 


Hello Kasib,

Have you tried using dsquery? I am sure that you should be able to export all accounts and groups? I do not know if it is easy to export the list of all the members of each group but I'm sure that with a little bit of effort you should be able to do it.

I think one of the only things you might encounter an issue with is enumerating the membership of groups like Domain Users, Domain Computers etc. as I believe they are dynamically calculated and dsquery may not be able to do dynamic calculations for you.

- CF.



__________________

My little dot on the web - Auditing Security in the Active Directory

 



Member

Posts: 15
Date: Jun 27, 2012
RE: How to export a list of all user and computer accounts and security groups in Active Directory?
Permalink  
 


Kasib,

Have you tried adfind? Its a really cool command-line tool and can help you find almost anything in Active Directory.

I don't know if its supported, but it is very useful.

Joe.



__________________
Don't mess with my Alienware!


Newbie

Posts: 4
Date: Jun 29, 2012
RE: How to export a list of all user and computer accounts and security groups in Active Directory?
Permalink  
 


Dear Mr.Kasib,

Have you tried GroupID from Imanami? It is a good solution and could certainly help you track and manage security groups in  Active Directory.

Imtiaz.



__________________

Sr. Systems Admin focused on Windows Management

Page 1 of 1  sorted by
Quick Reply

Please log in to post quick replies.

Post to Digg Post to Del.icio.us
Members Login
Username 
 
Password 
    Remember Me