Tech Talk

how to query a group in Active directory for finding its location and OU, just say the group name is starting with domain*
Syntax: dsquery group [{<StartNode> | forestroot | domainroot}]
[-o {dn | rdn | samid}] [-scope {subtree | onelevel | base}]
[-name <Name>] [-desc <Description>] [-samid <SAMName>]
[{-s <Server> | -d <Domain>}] [-u <UserName>]
[-p {<Password> | *}] [-q] [-r] [-gc]
[-limit <NumObjects>] [{-uc | -uco | -uci}]

Eg: if you search "domain admins" group in AD
then,

Code: Select all

dsquery group dc=kannade,dc=com -name domain*

now you will get the location eg:

Code: Select all

"CN=Domain Admins,CN=Users,DC=kannade,DC=com"

then use dsget command to find the list of members in the domain admins,

Code: Select all

dsget "CN=Domain Admins,CN=Users,DC=kannade,DC=com" -members

this will display the list of members in the domain admin group.