Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a way to export active directory data using built-in Windows Server 2008 tools? I want to get the entire tree of OU’s within OU’s in any human-readable format.

share|improve this question
What data do you want, and in what format? – Ben Pilbrow Feb 23 '12 at 8:46
You need to provide more info on your question as exactly WHAT do you want to export... – Spirit Feb 23 '12 at 9:52
@Spirit : I just did :-) – lisa1987 Feb 23 '12 at 11:39
up vote 4 down vote accepted

I suspect the tool you may want to look at is ldifde.

It will not export passwords (password hashes) though (ref). Getting passwords hashes out of the AD is pretty difficult by design.

share|improve this answer
As zore mentioned you can use ldifde. heres a sample to get you started ldifde -f exportOu.ldf -s Server1 -d "dc=Export,dc=com" -p subtree -r "(objectClass=organizationalUnit)" -l "cn,objectclass,ou" – RomeNYRR Feb 23 '12 at 13:48

I created a series of PowerShell scripts for exporting an AD structure (and then importing them into a test structure. Those are posted to the TechNet Script Center as the copyAD suite and under the ID "uslackr". Hope that can help.

share|improve this answer
You should probably post the script here and then link to the Script Center. – MDMarra Feb 23 '12 at 14:24
yes, but there are multiple scripts and they have a license (open source) that could be lost if I paste it here. – uSlackr Feb 23 '12 at 17:17

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.