How to view all users and groups in AD without logging onto the DC

active-directory

I would like to find groups and check the members inside AD, if possible using a tree view type of structure. I do not have RDC access to the DC, so I can't login and use Active Directory Users and Computers Snap in.

Is there another way to do this? From another server on the domain that is not a DC?

Best Answer

You need Windows Remote Administration Tools installed on a client workstation. It will allow you to manage the domain without having to login to the Domain Controllers.

You didn't specify what you're running, so I'll qualify my link saying it's the tools to be installed on Win7 to manage a 2008 server.

Related Solutions

Security – Reference to all users/groups in Active Directory

"Authenticated Users" includes all domain users, not sure if this would be available within your application but it works for group policies.

Way to view the members of an Active Directory group if you aren’t a domain admin and can’t log into to a domain controller

Absolutely. From a computer that's a member of the domain, open a command-prompt and run a:

NET GROUP "group name" /DOMAIN

Unless your administrators have changed the stock permissions on the group object you will be able to view the membership that way.

You can use AD Users and Computers even if you're not an administrator, but this, at least, can be done w/o installing anything.

Best Answer

Related Solutions

Security – Reference to all users/groups in Active Directory

Way to view the members of an Active Directory group if you aren’t a domain admin and can’t log into to a domain controller

Related Topic