In my last post, I wrote about finding out which users were members of a particular Active Directory (AD) group, but there is a useful inverse which is finding out which groups a user belongs to.
In my case recently, I really needed that because I wanted to clone their permissions so that I could perform the same superb standard of work and capability!
As ever, Powershell to the rescue because this is a simple one-liner using Get-ADPrincipalGroupMembership:
Get-ADPrincipalGroupMembership smoon | select name
Obviously (maybe) you would replace
smoon with the login name of the user you was interested in.
Finally, here’s what the output looks like:
Now you know 🙂
Written by Stephen Moon
email: stephen at logicalmoon.com