LDAP Query

What is the syntax for a 2008 Domain LDAP query to find the members of a given group? I've tried every combination I can think of but it is just not working.

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

dynamik

Examples at the bottom: Dsquery group

Just add OU after the DC components if necessary.

aordal

(&(&(|(&(objectCategory=person)(objectSid=*)(!samAccountType:1.2.840.113556.1.4.804:=3))(&(objectCategory=person)(!objectSid=*))(&(objectCategory=group)(groupType:1.2.840.113556.1.4.804:=14)))(objectCategory=user)(memberOf=CN=Managers,CN=Users,DC=domain,DC=org)))

You can cut that apart and make it neater, that's straight outta AD queries though. Modify the bolded portion to fit your needs.

Hyper-Me

Id highly recommend installing Powershell 2.0 and the Quest Active Directory PoSH CMDlets.

HeroPsycho

Hyper-Me wrote: »

Id highly recommend installing Powershell 2.0 and the Quest Active Directory PoSH CMDlets.

Agreed. How can it get any easier than:

get-qadgroupmember "groupname"

RTmarc

aordal wrote: »

(memberOf=CN=Managers,CN=Users,DC=domain,DC=org)

I guess I wasn't holding my tongue right or something but I used this format on Friday and no such luck. Tried it again today, worked perfectly. Thanks!