14

I would like to find groups and check the members inside AD, if possible using a tree view type of structure. I do not have RDC access to the DC, so I can't login and use Active Directory Users and Computers Snap in.

Is there another way to do this? From another server on the domain that is not a DC?

8

You need Windows Remote Administration Tools installed on a client workstation. It will allow you to manage the domain without having to login to the Domain Controllers.

You didn't specify what you're running, so I'll qualify my link saying it's the tools to be installed on Win7 to manage a 2008 server.

1
  • Starting with Windows 10 October 2018 Update, RSAT is included as a set of "Features on Demand" in Windows 10 itself.
    – OrangeDog
    Jan 20 at 11:09
29

You can do this in a limited fashion in Windows 10 (and 7-8) without installing anything extra. Open File Explorer, select Network, and you should see a button in the toolbar labeled "Search Active Directory".

Depending on your permissions, it will let you search users and groups by name, and view the membership of those. It won't show you a tree though; you have to know what you're looking for.

Update 2020-11-18: This option is now disabled for myself & some others; I don't know if it's my company's AD / GPO settings, or whether Microsoft has disabled this in recent builds of Windows 10.

"Search Active Directory"

6
  • This works on Windows 8.1 and Windows 10 as well Jul 29 '16 at 19:21
  • RSAT won't install in Windows 10 for me anymore, so this really saved me!
    – jimtut
    Nov 8 '19 at 19:00
  • My "Search Active Directory" button has recently been grayed out.
    – Jess
    Nov 17 '20 at 21:14
  • @Jess yes, I just noticed it is for me too. This may have something to do with Microsoft's recent efforts to get rid of the old Control Panel and associated functionality. I'll update the post, thanks.
    – Tobias J
    Nov 18 '20 at 16:23
  • 2
    Still there and working for me (20H2). However, the user properties only shows a subset and not e.g. group membership.
    – OrangeDog
    Jan 20 at 11:06
2

You could install the Server 2003 Admin Pack on your PC and use the AD Users and Computers Snap-In from your workstation. If you are running Vista/ Windows 7 you will need to enable the RSAT feature (Control Panel> Programs and Features> Turn Windows Features on or off) and select the AD DS and AD LDS Tools feature under "Role admin tools", under RSAT.

0

On my machine the Active Directory Module for Windows PowerShell was installed. So I ran this command to get info on a specific user:

Get-AdUser username

0

You can use Active Directory Explorer (ADExplorer) by Mark Russinovich:

0

To get a list of AD users from a Windows PC belonging to AD:

  1. right click on a file
  2. Security tab: Edit
  3. Add: set these fields
    1. Object Types=Users
    2. From this location: <your AD domain name>
  4. Advanced
  5. Find Now
0

You can use these commands:

net user /domain
net group /domain

To get the users in a specific group (doesn't seem to work recursively):

net group <GROUP> /domain

To get details for a user:

net user <USER> /domain

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.