Comments on: howto://document Active Directory-group memberships

By: Ed Fisher

Ed Fisher — Mon, 07 May 2012 19:49:25 +0000

Try for /f "tokens=* delims=," %G IN (list.txt) do and see where that takes you.
Good luck,
Ed

By: Lyn

Lyn — Wed, 02 May 2012 01:16:39 +0000

Hi Ed,

Using your help on the pages so far; from a command prompt, I can list an individual group name and get group members via C:\>dsquery group -name “_AA_xxx_PRD_11″ |dsget group -members. I have created a txt file on C:\groups.txt listing all the groups but need to run from a command from the command prompt that gets me a list all the groups in my groups.txt file and listtheir group members. I would appreciate you having a look for me and advising. Thanks, Lyn

By: Steve Lansing

Steve Lansing — Fri, 24 Feb 2012 16:12:28 +0000

Did you ever find out where that mysterious number 1 was coming from in the output? I am having the same issue and have not resolved it yet.

By: Steve Lansing

Steve Lansing — Fri, 24 Feb 2012 15:44:17 +0000

No, it happens when I run the command in batch mode. See a couple of posts above, where Michelle included the output…right before the >> filename.txt there is a 1 being inserted when the for loop starts running.

I’ve tried it on my machine Win764sp1 and also on a Server 2003 machine, same result, which makes me think it’s a function of the AD, which is 2008.

By: Ed Fisher

Ed Fisher — Fri, 24 Feb 2012 15:09:05 +0000

1) Is your keyboard mapped to a different character set or is your o/s not installed in EN-US? Your name seems American, and your ip does too, but it’s worth asking.
2) I updated my post when a font change in the them turned ASCII quotes into “curly quotes” but many of the comments still have them. Try typing things out longhand, to see if it makes any difference.
HTH
Ed

By: Steve Lansing

Steve Lansing — Thu, 23 Feb 2012 21:53:13 +0000

I had the same issue noted above…the command adds a numeral “1″ before the >> when you run it. Also running Win764SP1. I’ll try it on a different machine, see if I can get some joy, but I’m curious. Any ideas?

By: Mike

Mike — Wed, 01 Feb 2012 19:04:48 +0000

Adding the %%I after dsget group worked for me in a batch file. I’m running windows 7 64 bit.

By: Ed Fisher

Ed Fisher — Wed, 11 Jan 2012 19:13:16 +0000

Excellent, glad it helped you out and thanks for letting me know!

By: Will

Will — Wed, 11 Jan 2012 18:57:59 +0000

Hey Ed, thanks for this article, it worked perfectly.

By: Michele

Michele — Fri, 04 Nov 2011 16:28:22 +0000

Hi, thank you for your response.
That not works for me

By: Ed Fisher

Ed Fisher — Fri, 04 Nov 2011 16:22:20 +0000

Hi Michele,
Sorry about that; it might be an issue with the version of dsget you have installed, since the original commands worked well for me, but in trying to reproduce your error with a newer PC, I get the same results as you.
I have updated the post above to include the group name after dsget, like this.
dsget group %%I
Try adding the %%I after the dsget group and see if that helps.
Strange,
Ed

By: Michele

Michele — Fri, 04 Nov 2011 15:58:47 +0000

I’m getting the same error as JA:
dsget failed:’Target object for this command’ is missing.

My group.txt file is like this:
"CN=FBL-DIREZIONE,OU=GROUP,OU=FBL,DC=ABG,DC=INT" "CN=FBL-GRP_ACQ_FBL-FBV-MYV_WRITE,OU=GROUP,OU=FBL,DC=ABG,DC=INT"

My output (from dos prompt) begin like this and follows until the end of the group.txt file:
C:\>echo "CN=FBL-DIREZIONE,OU=GROUP,OU=FBL,DC=ABG,DC=INT" 1>>out.txt && dsque ry group -name "CN=FBL-DIREZIONE,OU=GROUP,OU=FBL,DC=ABG,DC=INT" | dsget group -members -expand 1>>outt.txt dsget failed:`Target object for this command' is missing. type dsget /? for help. C:\>echo "CN=FBL-GRP_ACQ_FBL-FBV-MYV_WRITE,OU=GROUP,OU=FBL,DC=ABG,DC=INT" 1>>o ut.txt && dsquery group -name "CN=FBL-GRP_ACQ_FBL-FBV-MYV_WRITE,OU=GROUP,OU=FBL ,DC=ABG,DC=INT" | dsget group -members -expand 1>>outt.txt dsget failed:`Target object for this command' is missing. type dsget /? for help.

By: Ed Fisher

Ed Fisher — Mon, 22 Aug 2011 20:38:46 +0000

I don’t think so, or at least, I couldn’t figure out how, that’s why I went to the CLI.
Ed

By: Ed Fisher

Ed Fisher — Mon, 22 Aug 2011 20:37:51 +0000

You’re welcome, glad it helped.
Ed

By: David

David — Sat, 20 Aug 2011 05:58:08 +0000

Using saved queries in ADUC, can you make the export recursive? I am currently using memberOf=”groupDN”, but there are about 15 groups that are members of that group, how can I export their members to the same list?