Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to know who are the members of some AD group. Which free tool can I use to do this?


I am not an AD admin and I am using Windows XP.

share|improve this question

Try the active directory browser from microsoft:

share|improve this answer

ADUC (Active Directory Users and Computers) MMC snap-in is in the ADMINPAK.MSI (Win2003) or RSAT (Win2008), both from Microsoft. LDP.EXE also is a one-EXE in the Support Tools, again MS.

Now. Neither will chase trust "member-of" memberships.

share|improve this answer
+1, AD Users and Computers is pretty good. I don't see a reason to need to script this or use any command-line tools based on the original info. – Le Comte du Merde-fou Oct 30 '09 at 23:48

All the tools you need are already on your DCs.

See my previous answer related to this. In your case the command would be similar to this:

dsquery group -name "myGroup" | dsget group -members -expand

PS. The -expand will display the recursive list of members - so if you have a group called anotherGroup that is a member of myGroup, it'll show you all the members of anotherGroup too.

share|improve this answer

I use ldapsearch and Ruby's LDAP modules to search AD for information. You might want to try one of the free LDAP "Editors" like led or LDAP Explorer Tool.

share|improve this answer
up vote 0 down vote accepted

I have tried some LDAP browsers and the one which was so easy to use was LDAP brower from LDAPSoft.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.