Home / server / Questions / 22866
Accepted
Luke
Asked: 2009-06-10 11:40:09 +0800 CST

How can I determine my user account's OU in a Windows domain?

  • 772

Is there any way (short of getting an active directory browser) to view my OU while logged in to the domain?

windows active-directory

7 Answers

  1. gpresult /r | find "OU"

    will do it.

    • 56

  2. In Command Prompt,

    whoami /fqdn
    • 33
  3. Best Answer

    UPDATE
    You should now use this answer on any kind of modern version of Windows

    Here's a quick VBS script you can use to display your account's DistinguishedName attribute which contains the OU that your account is in:

    set objSysInfo = CreateObject("ADSystemInfo")
set objUser = GetObject("LDAP://" & objSysInfo.UserName)
wscript.echo "DN: " & objUser.distinguishedName

    EDIT: I should say that it will display the DN of the account in which context the script is run...

    • 16

  4. I've found that 

    gpresult -v|more

    also works for this.

    • 8

  5. I am able to run the following in a cmd window

    gpresult /r | find "OU"

    Example output:

    USER SETTINGS
--------------
CN=Lastname\, Firstname,OU=Users,OU=Toronto,DC=site,DC=com

    Last time Group Policy was applied: 1/24/2019 at 4:04:04 PM
    Group Policy was applied from:      dc.site.com
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        SITE
    Domain Type:                        Windows 2008 or later

    It also lists the user groups you are a member of:

    The user is a part of the following security groups
---------------------------------------------------
    Domain Users
    Everyone
    BUILTIN\Administrators
    BUILTIN\Users
    Performance Log Users
    NT AUTHORITY\INTERACTIVE
    CONSOLE LOGON
    NT AUTHORITY\Authenticated Users
    This Organization
    LOCAL
    custom_security_linux_group
    • 3

  6. User: adfind -sc u:%username% dn

    Computer: adfind -sc c:%computername% dn

    Adfind available at http://www.joeware.net/freetools/tools/adfind/index.htm

    • 2

  7. At a command / powershell prompt: 

    dsquery user -name <your-user-name>
    • 0