35

Is there any way (short of getting an active directory browser) to view my OU while logged in to the domain?

1
  • Are you a domain admin, or have access to the domain admin tools? Jun 9, 2009 at 19:44

7 Answers 7

16

UPDATE
You should now use this answer on any kind of modern version of Windows


Here's a quick VBS script you can use to display your account's DistinguishedName attribute which contains the OU that your account is in:

set objSysInfo = CreateObject("ADSystemInfo")
set objUser = GetObject("LDAP://" & objSysInfo.UserName)
wscript.echo "DN: " & objUser.distinguishedName

EDIT: I should say that it will display the DN of the account in which context the script is run...

4
  • You beat me to it by about 15 seconds! Zow... Jun 9, 2009 at 19:48
  • I beat him but for some reason gpresult /r doesn't work for everyone. "snaps fingers in lost pointage regret" ;-)
    – MathewC
    Jun 9, 2009 at 19:57
  • Aye, 'tis true :) +1 though, great command!
    – squillman
    Jun 9, 2009 at 20:05
  • 3
    Not sure why this is the accepted answer when "whoami /fqdn" is far simpler?
    – RCross
    Feb 23, 2018 at 10:42
57

gpresult /r | find "OU"

will do it.

10
  • 1
    Is this a windows command? Doesn't seem to work.
    – Luke
    Jun 9, 2009 at 19:48
  • /r doesn't work for me, although you do get almost everything otherwise with gpresult. Jun 9, 2009 at 19:48
  • When I do it there is a user setting section that shows the OU.
    – MathewC
    Jun 9, 2009 at 19:53
  • 1
    Awesome command that I didn't know about. Thanks! +1 Jun 9, 2009 at 19:54
  • 2
    Needs to be 'findstr' instead of 'find'
    – kafka
    Dec 19, 2018 at 16:44
38

In Command Prompt,

whoami /fqdn
1
  • Works in the event gpresult yields ERROR: Access Denied. Thanks.
    – timss
    Dec 1, 2017 at 11:10
8

I've found that

gpresult -v|more 

also works for this.

3

I am able to run the following in a cmd window

gpresult /r | find "OU"

Example output:

USER SETTINGS
--------------
CN=Lastname\, Firstname,OU=Users,OU=Toronto,DC=site,DC=com

    Last time Group Policy was applied: 1/24/2019 at 4:04:04 PM
    Group Policy was applied from:      dc.site.com
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        SITE
    Domain Type:                        Windows 2008 or later

It also lists the user groups you are a member of:

The user is a part of the following security groups
---------------------------------------------------
    Domain Users
    Everyone
    BUILTIN\Administrators
    BUILTIN\Users
    Performance Log Users
    NT AUTHORITY\INTERACTIVE
    CONSOLE LOGON
    NT AUTHORITY\Authenticated Users
    This Organization
    LOCAL
    custom_security_linux_group
2

User: adfind -sc u:%username% dn

Computer: adfind -sc c:%computername% dn

Adfind available at http://www.joeware.net/freetools/tools/adfind/index.htm

1
  • adfind is one of my favorite AD tools. I <3 joeware. Dec 28, 2010 at 8:54
2

At a command / powershell prompt:

dsquery user -name <your-user-name>

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .