Query AD Computer groups

[bourny]

I have ran many AD queries in the past using some of the AD functions and includes I found on the forum.

I am trying to now query AD for a list of groups a computer account is a member of. This seems to be defying me,

Can anyone suggest the best way to return a list of groups a computer account is a member of.

[JLogan3o13]

Hi, bourny. It sounds like you're already using the If you take a look at the different functions of the latest UDF, I believe the _AD_RecursiveGetMemberOf function will do what you would like.

[bourny]

Thanks, That worked fine. Does not return anything if there is just the Domain computers group but returns any additional groups. Had tried the _AdIsMemberOf and _AdGetUserGroups

Thanks for the time you spent looking at this for me.

[water]

_AD_GetUserGroups should have worked too. If you pass the computer name as SamAccountName you have to add a dollar sign at the end.

$aUser = _AD_GetUserGroups(@ComputerName & "$")

This returns a list of groups the computer is an immediate member of.

To get a recursive list of group membership use _AD_RecursiveGetMemberOf.

[amphoric]

How would i use 

$aUser = _AD_GetUserGroups(@ComputerName & "$")

But only show the 'CN' within a list box, not the entire string.

 

Thanks

[water]

_AD_GetuserGroups always returns the FQDN of the group.
But you could use _AD_GetObjectsInOU to query all groups where @ComputerName & "$" is a member and let the function return the Displayname of the group.
Example:

 

Edited June 1, 2017 by water

[amphoric]

Thanks Water,

Im struggling to get this to work :/... Could you please give me an example of what the code might be?

I have the following code to bring back all groups within a certain OU, but unsure how I can specify only for a certain ComputerName and bring back the results from the certain OU.

_ad_GetObjectsInOU($sOU , '(&(ObjectsCategory=group) (distinguishedName=*))', 2, "CN")

Cheers

[water]

Example for the current user:

#include <AD.au3>
_AD_Open()
Global $sCN = _AD_SamAccountNameToFQDN(@Username)
Global $aResult = _AD_GetObjectsInOU("", "(&(objectClass=group)(member=" & $sCN & "))", 2, "cn")
_AD_Close()
_ArrayDisplay($aResult)

 

[amphoric]

Ahh perfect! You hero! 

I have got it working now  thank you very much for your help!!!

How would i specify it to only check within a single OU though?

Thanks

[water]

Specify the OU to check as parameter 1.

[amphoric]

ahh obviously!!! haha my bad

Thanks again Water

[water]