Managing Groups

[nevets2001uk]

We have a number of DL Groups defined which grant access to specific folders. We then have a number of Global Groups such as "G - IT Department" which are members of the required DL groups. We add each user to the correct Global Groups to apply their access.

What we'd now like to do is provide a means to document this structure. Ideally we'd like to generate a report which lists all of the Global Groups and the DL Groups they are members of so that we can easily determine the access we have granted them. We thought about maintaining a database with this information but I'm sure there must be some easy way to extract this from the AD database into a basic report which we can then format to meet our requirements?

We already retain a list of the groups to which users belong so we don't need to include these in the report.

EXAMPLE OUTPUT

G - IT Department (Modified on 01-09-2008)

Member Of:
DL - Document Archives - RW
DL - Transit - RW
DL - Company Reports - R

G - Shipping Department (Modified on 16-09-2008)

Member Of:
DL - Document Archives - R
Dl - Shipping Data - RW

Steve G (MCSE / MCSA:Messaging)

 

[adrianvasile]

Have you tried Microsoft's website? I know that there are ways to querry AD database using command line and output the results to a file. You might to try google for "querry AD"