How to upload a list of groups assigned to a particular object in AD or objects?

Question

Active Directory

Colleagues,
Please tell me if there is software that can solve the following tasks:
1) Download the list of groups assigned to a particular object in AD
2) Download the list of all Security groups located inside a container
3) Download the list of objects , located inside a particular container
. I heard that this can be done using scripts or Power Shell, but I'm still at the beginning of the difficult path of system administration and these tools are not yet familiar to me.
The upload is needed in order to analyze the existing security groups, and we have a lot of them.

Answer 1

1. Free - write a script, for a fee www.paramountdefenses.com/goldfinger
2. In gui - make a request in the aduc snap-in, in the console - the corresponding ldp request
3. Similarly 2.

Answer 2

There is a snap-in in powershell that allows you to manage AD
For example
, a request for all AD users: get-qaduser
a request for all domain groups: get-quagroup
And with conditions
A request for all groups lying in the root container in the global groups folder: get-qadgroup | ?{$_.ParentContainer -like "*global*"}
Query the user by last name with the display of all properties: get-qaduser|?{$_.name -like "*ivanov*"} |fl
There are many possibilities, it is described in more detail at site of the powergui project, there is also an alternative GUI snap-in for managing AD written on the basis of the above commands

Answer 3

you can use powershell, you can also use standard dsquery | dsget