Comments on: howto://document Active Directory-group memberships

By: Mike

Mike — Wed, 01 Feb 2012 19:04:48 +0000

Adding the %%I after dsget group worked for me in a batch file. I’m running windows 7 64 bit.

By: Ed Fisher

Ed Fisher — Wed, 11 Jan 2012 19:13:16 +0000

Excellent, glad it helped you out and thanks for letting me know!

By: Will

Will — Wed, 11 Jan 2012 18:57:59 +0000

Hey Ed, thanks for this article, it worked perfectly.

By: Michele

Michele — Fri, 04 Nov 2011 16:28:22 +0000

Hi, thank you for your response.
That not works for me

By: Ed Fisher

Ed Fisher — Fri, 04 Nov 2011 16:22:20 +0000

Hi Michele,
Sorry about that; it might be an issue with the version of dsget you have installed, since the original commands worked well for me, but in trying to reproduce your error with a newer PC, I get the same results as you.
I have updated the post above to include the group name after dsget, like this.
dsget group %%I
Try adding the %%I after the dsget group and see if that helps.
Strange,
Ed

By: Michele

Michele — Fri, 04 Nov 2011 15:58:47 +0000

I’m getting the same error as JA:
dsget failed:’Target object for this command’ is missing.

My group.txt file is like this:
"CN=FBL-DIREZIONE,OU=GROUP,OU=FBL,DC=ABG,DC=INT" "CN=FBL-GRP_ACQ_FBL-FBV-MYV_WRITE,OU=GROUP,OU=FBL,DC=ABG,DC=INT"

My output (from dos prompt) begin like this and follows until the end of the group.txt file:
C:\>echo "CN=FBL-DIREZIONE,OU=GROUP,OU=FBL,DC=ABG,DC=INT" 1>>out.txt && dsque ry group -name "CN=FBL-DIREZIONE,OU=GROUP,OU=FBL,DC=ABG,DC=INT" | dsget group -members -expand 1>>outt.txt dsget failed:`Target object for this command' is missing. type dsget /? for help. C:\>echo "CN=FBL-GRP_ACQ_FBL-FBV-MYV_WRITE,OU=GROUP,OU=FBL,DC=ABG,DC=INT" 1>>o ut.txt && dsquery group -name "CN=FBL-GRP_ACQ_FBL-FBV-MYV_WRITE,OU=GROUP,OU=FBL ,DC=ABG,DC=INT" | dsget group -members -expand 1>>outt.txt dsget failed:`Target object for this command' is missing. type dsget /? for help.

By: Ed Fisher

Ed Fisher — Mon, 22 Aug 2011 20:38:46 +0000

I don’t think so, or at least, I couldn’t figure out how, that’s why I went to the CLI.
Ed

By: Ed Fisher

Ed Fisher — Mon, 22 Aug 2011 20:37:51 +0000

You’re welcome, glad it helped.
Ed

By: David

David — Sat, 20 Aug 2011 05:58:08 +0000

Using saved queries in ADUC, can you make the export recursive? I am currently using memberOf=”groupDN”, but there are about 15 groups that are members of that group, how can I export their members to the same list?

By: Brandon

Brandon — Sat, 20 Aug 2011 02:15:41 +0000

Thank You sir. I know this post is old but this info really came in handy. I am using the code that outputs the members into files that are named after the group. The original script worked too but from what I could see it didn’t label each section with the group name. That’s an easy mod I am sure.

Thank You!

By: Ed Fisher

Ed Fisher — Thu, 24 Mar 2011 01:01:41 +0000

Glad you got some use from it.
Ed

By: me

me — Thu, 24 Mar 2011 00:41:40 +0000

ran it command line and it work fine – thanks. Wasnt what I was looking for but pretty cool

By: Ed Fisher

Ed Fisher — Thu, 29 Jul 2010 15:00:38 +0000

Anne,
I’m sorry, I dropped the ball on this one…it completely slipped my mind. Try this in a cmd file, or use a single % each time to do it at a cmd prompt.
for /f "tokens=* delims=;" %%I in (groups.txt) do echo %%I >> out.txt && dsquery group -name %%I | dsget group -members -expand >> %%I.txt
That generated one text file for each group in groups.txt, named groupname.txt.
HTH
Ed

By: Ed Fisher

Ed Fisher — Mon, 26 Jul 2010 15:24:08 +0000

JA,
I’m not sure, but there may be either a problem with copying/pasting, or something else too subtle to pick up on. I tried to copy/paste from your comment and it borked miserably with smart quotes, hypens, etc. so I just retyped it all by hand, and put some spaces in that you did not. Oh, and I put an S on the end of the group file by habit and just called my output file out.txt…that is not what is causing problems for you. My command in a batch file (which works) looks like this…
for /f "tokens=* delims=;" %%I in (groups.txt) do echo %%I >> out.txt && dsquery group -name %%I | dsget group -members -expand >> out.txt
Try copying the above, and if that does not work, try typing it in long hand to make sure no character glitches are killing you.
Let me know if that works any better for you,
Ed

By: JA

JA — Mon, 26 Jul 2010 12:33:57 +0000

This looks exactly like what I need.

I seem to run into a snag with this which I”m sure is user error.

I can run this code no problem to get the list of groups:
dsquery group -limit 0 > groups.txt

I run into an error when I run the code:
for /f “tokens=* delims=;” %%I in (group.txt) do echo %%I >> groupmembers.txt && dsquery group -name %%I | dsget group –members –expand >>groupmembers.txt

The error I get is dsget failed:’Target object for this command’ is missing.

I am running it in a batch file using %% instead of % (i tired it both ways) on a DC with Domain admin credentials.

I run the batch file from the same directory as the groups.txt file.

Any ideas on what I am doing wrong?
Thanks!