Question

我需要找出我的AD用户所属的组。我按照以下网址中的说明操作，但我的机器上没有足够的访问权限来执行此操作：

https://www.howtogeek.com/tips/how-to-see-which-group-your-windows-user-belongs-to/

如果我搜索＆＃34;查找用户，联系人和群组＆＃34;对话框然后我可以找到我的用户，但它不会显示此对话框使我能够找到与我的AD用户关联的组。我是否有其他选项可用于识别与AD用户关联的组？

Answer 1

启动Powershell会话并运行以下命令：

net user <username> /domain

没有任何域名前缀的用户名称在哪里，例如。

net user adam /domain

提供普通旧用户名的任何内容都可以正常工作......

net user $env:username /domain
net user [Environment]::UserName /domain

A -

Answer 2

如何做以下任何事情......

### Show User and AD group membership

# Get users with all their properties and their group membership, display user and group name

ForEach ($TargetUser in (Get-ADUser -Filter * -Properties *))
{
"`n" + "-"*12 + " Showing group membership for " + $TargetUser.SamAccountName
Get-ADPrincipalGroupMembership -Identity $TargetUser.SamAccountName `
| Select Name
}

# Get users with base properties and their group membership, display user and group name

ForEach ($TargetUser in (Get-ADUser -Filter *))
{
"`n" + "-"*12 + " Showing group membership for " + $TargetUser.SamAccountName
Get-ADPrincipalGroupMembership -Identity $TargetUser.SamAccountName `
| Select Name
}

# Get user and AD group info, display user and group name

Get-ADUser -Filter "*" -SearchBase "CN=Users,DC=contoso,DC=com" `
-SearchScope OneLevel -Properties Name, MemberOf `
| Select-Object Name, @{Label="Memberof";
expression={($_.memberof `
| Get-ADGroup `
| Select-Object -ExpandProperty Name) -Join ","}}

Get-ADUser -Filter "*" -SearchBase "CN=users,DC=contoso,DC=com" `
-SearchScope OneLevel -Properties Name, MemberOf |
Select-Object Name, @{Label="Memberof";
expression={($_.memberof | Get-ADGroup `
| Select-Object -ExpandProperty Name) -Join ","}} `
| Format-List

当然可以根据需要进行格式化。

查看广告用户组的选项有哪些？

2 个答案: