Listing Group Membership in Active Directory

powershell

In my last post, I wrote about finding out which users were members of a particular Active Directory (AD) group, but there is a useful inverse which is finding out which groups a user belongs to.

In my case recently, I really needed that because I wanted to clone their permissions so that I could perform the same superb standard of work and capability! As ever, Powershell to the rescue because this is a simple one-liner using Get-ADPrincipalGroupMembership:

Get-ADPrincipalGroupMembership smoon | select name

Obviously (maybe) you would replace smoon with the login name of the user you was interested in. Finally, here’s what the output looks like:

name
----
Domain Users
App-MegaGroup
App-CheekyMonkey
File-DirectoryToSave

Now you know :-)

Hi! Did you find this useful or interesting? I have an email list coming soon, but in the meantime, if you ready anything you fancy chatting about, I would love to hear from you. You can contact me here or at stephen ‘at’ logicalmoon.com