Find groups in which a user is a member
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2
To find groups in which a user is a member
Using the Windows interface
Using a command line
Using the Windows interface
Open Active Directory Users and Computers.
In the console tree, click Users.
Where?
- Active Directory Users and Computers/domain node/Users
Or, click the folder that contains the user account.
In the details pane, right-click a user account, and then click Properties.
Click the Member Of tab.
Notes
Performing this task does not require you to have administrative credentials. Therefore, as a security best practice, consider performing this task as a user without administrative credentials.
To open Active Directory Users and Computers, click Start, click Control Panel, double-click Administrative Tools, and then double-click Active Directory Users and Computers.
The Member Of tab for a user displays a list of groups in the domain where the user's account is located. Active Directory does not display groups that reside in trusted domains where the user is a member.
Using a command line
Open Command Prompt.
Type:
dsget userUserDN-memberof
Value | Description |
---|---|
UserDN |
Specifies the distinguished name of the user object for which you want to display group membership. |
Notes
Performing this task does not require you to have administrative credentials. Therefore, as a security best practice, consider performing this task as a user without administrative credentials.
To open a command prompt, click Start, point to All programs, point to Accessories, and then click Command prompt.
To view the complete syntax for this command, at a command prompt, type:
dsget user /?
Information about functional differences
- Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.
See Also
Concepts
Dsget
Working with MMC console files
Find a user account
Find a group
Command-line reference A-Z