Home / server / Questions / 261381
Accepted
JL.
Asked: 2011-04-20 10:13:28 +0800 CST

How to view all users and groups in AD without logging onto the DC?

  • 772

I would like to find groups and check the members inside AD, if possible using a tree view type of structure. I do not have RDC access to the DC, so I can't login and use Active Directory Users and Computers Snap in.

Is there another way to do this? From another server on the domain that is not a DC?

active-directory

7 Answers

  1. You can do this in a limited fashion in Windows 10 (and 7-8) without installing anything extra. Open File Explorer, select Network, and you should see a button in the toolbar labeled "Search Active Directory".

    Depending on your permissions, it will let you search users and groups by name, and view the membership of those. It won't show you a tree though; you have to know what you're looking for.

    Update 2020-11-18: This option is now disabled for myself & some others; I don't know if it's my company's AD / GPO settings, or whether Microsoft has disabled this in recent builds of Windows 10.

    "Search Active Directory"

    • 31
  2. Best Answer

    You need Windows Remote Administration Tools installed on a client workstation. It will allow you to manage the domain without having to login to the Domain Controllers.

    You didn't specify what you're running, so I'll qualify my link saying it's the tools to be installed on Win7 to manage a 2008 server.

    • 8

  3. You could install the Server 2003 Admin Pack on your PC and use the AD Users and Computers Snap-In from your workstation. If you are running Vista/ Windows 7 you will need to enable the RSAT feature (Control Panel> Programs and Features> Turn Windows Features on or off) and select the AD DS and AD LDS Tools feature under "Role admin tools", under RSAT.

    • 2

  4. To get a list of AD users from a Windows PC belonging to AD:

    1. right click on a file
    2. Security tab: Edit
    3. Add: set these fields
      1. Object Types=Users
      2. From this location: <your AD domain name>
    4. Advanced
    5. Find Now
    • 2

  5. You can use Active Directory Explorer (ADExplorer) by Mark Russinovich:

    • 1

  6. You can use these commands:

    net user /domain
net group /domain

    To get the users in a specific group (doesn't seem to work recursively):

    net group <GROUP> /domain

    To get details for a user:

    net user <USER> /domain
    • 1

  7. On my machine the Active Directory Module for Windows PowerShell was installed. So I ran this command to get info on a specific user:

    Get-AdUser username

    • 0