Re: LDP query for user groups nested?

No you can't recursively gather group memberships with a single query other than as Dean suggests using tokenGroups. Note that this will not chase into nesting into other domains.

Yes it is painful.

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net


Eric - ARUP wrote: 
Hello

Is it possible to query AD for a user to get the groups he is a member of, and if any of those groups are nested then also return those uplevel groups as well.

Currently testing this we query the user and get his memberOf, but unless we query each group we dont get the uplevel groups for those that are nested without a seperate query.

thanks
e-

.

Relevant Pages

  • Re: LDP query for user groups nested?
    ... Microsoft about it for their upcoming .NET DSAPI for 2.0? ... > that you need to query each additional group similar to this: ... > tracking and auditing group memberships to find out if low-level groups ... >>> unless we query each group we dont get the uplevel groups for those that ...
    (microsoft.public.windows.server.active_directory)
  • Re: LDP query for user groups nested?
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... I've since modified a version similar to this that's used for group memberships only i.e. query a group and ask it for all of its members and chase those membrs that are groups then munge. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Script the removal of the group memberships of all disabled users in AD?
    ... only have a single Windows 2000 Domain with only one domain controller. ... Basically someone lumped all the disabled users into a global group called ... "Disabled" but left the original group memberships of these accounts intact. ... Query a DC for every domain with a query for every user like ...
    (microsoft.public.windows.server.active_directory)
  • Re: finding group user belongs too
    ... in any security group at all and add them to a group. ... I have an example VBScript program to document the groups a user belongs to ... If you want to document all group memberships, ... An ADO query for all ...
    (microsoft.public.scripting.vbscript)
  • Re: Ordering on a foreign table fields
    ... In the query, include both the Memberships table, and the People table. ... Drag the * from the Memberships table into the grid, ... table have a Default Value assigned, you may that this confuses Access and ...
    (microsoft.public.access.forms)