How to list user’s domain group memberships
Today I had to figure out what domain groups a user was a part of. I had to find out if a particular user was part of a specific domain group or not, so that I could verify if that group was part of the server’s local administrators group. And if it wasn’t, then I would add that user specifically. Yeah I could explicitly list the user regardless, but I was looking for neatness and not redundancy of privileges. I didn’t have access to the Active Directory Users and Computers MMC so I need another way.
A great command line tool to know is GPRESULT.EXE. This tool querys the Resultant Set of Policy (RSoP). So what is RSoP? Glad you asked. Basically, this tool querys group policy settings. You can use this tool to see how group policy affects a certain user or certain machine. To run rsop, just run rsop from the command line or run line.
Now back to gpresult. Running just gpresult.exe will give you the list of options. If you are on the computer and logged in as the user you want to check the domain groups, then the only command you would need to run is gpresult /r
Related posts:
