Sunday, 30 September 2012

Query Active Directory without administration pack

If the server you logged-on to doesn't have the administration tool/snap-in for Active Directory, an alternative is to use the standard query window. But of course it won't be as convenient as the administration tool itself and the interface is quite limited.

Run this command: rundll32 dsquery,OpenQueryWindow



You can then try search the AD and find the info you need.

Eg.
You wanted to find all users belong a particular group but you're unsure of the group name, you just roughly remember the name. Here're what you can do:

  1. List out the group name in the domain
    (Run this at the command prompt: 
    NET GROUP /DOMAIN)
    *Reference: 
    http://www.petri.co.il/list_all_users_and_groups_in_domain.htm
  2. Find the group name you looking for
  3. Use the query window above to find that group
  4. Double click on the result and it will shows you the list of member in the group