35

Is there any way (short of getting an active directory browser) to view my OU while logged in to the domain?

Improve this question
1
  • Are you a domain admin, or have access to the domain admin tools?
    – Matt Simmons
    Jun 9, 2009 at 19:44

7 Answers 7

Reset to default
16

UPDATE
You should now use this answer on any kind of modern version of Windows

Here's a quick VBS script you can use to display your account's DistinguishedName attribute which contains the OU that your account is in:

set objSysInfo = CreateObject("ADSystemInfo")
set objUser = GetObject("LDAP://" & objSysInfo.UserName)
wscript.echo "DN: " & objUser.distinguishedName

EDIT: I should say that it will display the DN of the account in which context the script is run...

Improve this answer
4
  • You beat me to it by about 15 seconds! Zow...
    – Evan Anderson
    Jun 9, 2009 at 19:48
  • I beat him but for some reason gpresult /r doesn't work for everyone. "snaps fingers in lost pointage regret" ;-)
    – MathewC
    Jun 9, 2009 at 19:57
  • Aye, 'tis true :) +1 though, great command!
    – squillman
    Jun 9, 2009 at 20:05
  • 3
    Not sure why this is the accepted answer when "whoami /fqdn" is far simpler?
    – RCross
    Feb 23, 2018 at 10:42
56

gpresult /r | find "OU"

will do it.

Improve this answer
10
  • Is this a windows command? Doesn't seem to work.
    – Luke
    Jun 9, 2009 at 19:48
  • /r doesn't work for me, although you do get almost everything otherwise with gpresult.
    – Matt Hanson
    Jun 9, 2009 at 19:48
  • When I do it there is a user setting section that shows the OU.
    – MathewC
    Jun 9, 2009 at 19:53
  • 1
    Awesome command that I didn't know about. Thanks! +1
    – Matt Simmons
    Jun 9, 2009 at 19:54
  • 1
    Needs to be 'findstr' instead of 'find'
    – kafka
    Dec 19, 2018 at 16:44
34

In Command Prompt,

whoami /fqdn
Improve this answer
1
  • Works in the event gpresult yields ERROR: Access Denied. Thanks.
    – timss
    Dec 1, 2017 at 11:10
8

I've found that 

gpresult -v|more

also works for this.

Improve this answer
3

I am able to run the following in a cmd window

gpresult /r | find "OU"

Example output:

USER SETTINGS
--------------
CN=Lastname\, Firstname,OU=Users,OU=Toronto,DC=site,DC=com

    Last time Group Policy was applied: 1/24/2019 at 4:04:04 PM
    Group Policy was applied from:      dc.site.com
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        SITE
    Domain Type:                        Windows 2008 or later

It also lists the user groups you are a member of:

The user is a part of the following security groups
---------------------------------------------------
    Domain Users
    Everyone
    BUILTIN\Administrators
    BUILTIN\Users
    Performance Log Users
    NT AUTHORITY\INTERACTIVE
    CONSOLE LOGON
    NT AUTHORITY\Authenticated Users
    This Organization
    LOCAL
    custom_security_linux_group
Improve this answer
2

User: adfind -sc u:%username% dn

Computer: adfind -sc c:%computername% dn

Adfind available at http://www.joeware.net/freetools/tools/adfind/index.htm

Improve this answer
1
  • adfind is one of my favorite AD tools. I <3 joeware.
    – JamesBarnett
    Dec 28, 2010 at 8:54
0

At a command / powershell prompt: 

dsquery user -name <your-user-name>
Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.