列出属于Active Directory域中其他组成员的组

Question

does anybody know a way how to find full members (users and groups) of domain.

Similar as to 'net localgroup Administrators' reports both - users and groups that are members of group Administrators, however similar command in relation to domain 'net group /domain ' lists only members (not groups). Is there a simple way (w/o Powershell to accomplish this task)?

Thanks in advance. Jurz

Answer 1

dsget and dsquery are the likely candidates here (depending on OS you are trying for)

You can try this (I'm not at a DC to test it at the moment)

Groups are

dsquery group DC=Contoso,DC=Com

User's should be

dsquery user dc=ms,dc=tld 

Also note you can pipe from one command to another - ie get groups then users

dsquery group DC=contoso,DC=com -name yourgroup | dsget group -members 

You can try without -name and see if it works.