AD - how to find what OU a security group belongs in 3

[blade10]

All-

I created this security (global) group and placed it in a specific OU, which led me to think about stuff.

I know how to find a group via it's name in AD but I don't see a way to search for a security group in order to lead me to what OU it belongs to... especially if you have sooo many OU's it is hard to locate it..

Is a script the only way to find it? or can adsi edit somehow point to what OU a group belongs to.. unless there is a way to find it right from AD but can't seem to locate via trying many examples..

any options here I would appreciate your insight.

blade

 

[PScottC]

Which OU a group belongs in is based on the criteria you, the administrator, decide upon. If you are talking about performing an audit and verifying that the groups are placed according to your criteria, then the method is based on how often you plan to repeat the audit. If you are going to do it once a week, I would suggest developing a VB script to do it. If it's just from time to time, then dump all of your groups with CSVDE and look at them in excel.

What are you looking to do?

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers

 

[58sniper]

dsquery group -name "name of group"

you can also do this:
faq329-6614

Pat Richard MVP
Plan for performance, and capacity takes care of itself. Plan for capacity, and suffer poor performance.

http://www.ucblogs.net/blogs/exchange/

 

[blade10]

hi Pat!

that dsquery command worked great! gave me exactly what I needed but I will consider what the CSVDE method too from PSCott...

thanks to both!

blade

 

[TechyMcSe2k]

I got a star for ya Pat!

 

[TechyMcSe2k]

As always, more than one skin this cat:
you can click on the Object tab in the properties of your group to find the location by Canonical name of object

 

[58sniper]

Thanks for the star, TechyMcSe2k!

blade10 - dsquery can be used to lookup other objects, too, like users and computers. I use it everyday.

Pat Richard MVP
Plan for performance, and capacity takes care of itself. Plan for capacity, and suffer poor performance.

http://www.ucblogs.net/blogs/exchange/

 

[blade10]

To both of you stars!

Thanks again, I used dsquery to also identify exactly how many global catalog servers I have in my large meshed forest (s).. it works great!

Then I did as Techy stated, viewed the ou presence for that security group from the Object Tab!

Awesome!!!!!!!!!!!

happy holidays!

blade

 

[blade10]

Hi 58Sniper or TechyMcSe2k,

Is there a way to identify in AD what a users password change history is? Example, I'd like to know how many times a user was prompted to have her password changed in a given month?

Is there a way to drill down in ADSI Edit in order to obtain this info? I also have BindView which is a nice overlay ans similar to ADSIEdit.. I just don't know how to find this "specific" information..

thanks for any support on this.

blade