We have a tool that does this (although this is not its main feature), but it's not free. It's actually a backup tool of all links in your AD forest (i.e. all domains in the forest).
As we store all of these in an SQL DB, we can easily run reports on group-nesting across the whole forest, including all domain local groups in any domain. The main purpose is obviously to have this information available in case you need to restore the group-links (which there are plenty of reasons for, especially in an auth-restore case). /Guido -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Cothern, Jeffrey D Mr CTR USSOCOM HQ Sent: Donnerstag, 21. Dezember 2006 16:12 To: ActiveDir@mail.activedir.org Subject: [ActiveDir]Groups Greetings I am having to setup groups within our AD structure using AGDLP method. We are doing it in a way to follow or organization structure. This of course is creating a lot of groups. To ensure that I have the groups nested correctly I am looking for a way to easily get a graphical representation or excel spreadsheet with data from AD showing the nested groups. I have looked at many scripts and also using DSget but it doesn't give me all the information that I need. I either get all the users that are nested in subgroups but it doesn't tell me which group those users are a member of. I found another script that actually puts text next to the users telling me which nested group they are a member of but then it doesn't show me any nested groups that are currently empty. Does anyone know of a utility out there that may show me the members of groups and the groups those groups are members of etc. Jeff List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir@mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
