Hi all. I was hoping to get some help via this forum in regards to something we are trying to accomplish in our Active Directory environment.

In particular, we are in the midst of consolidating two forests, and as a part of the consolidation, we would like to enumerate all the members of our core domain security groups. We are looking for a way to be able to list the complete expanded nested group memberships of most of our Active Directory security groups.

Is there an efficient and reliable way in which to do this? We've tried scripting and PowerShell, but we end up with issues due to circular nested domain security group memberships.

Any input is appreciated.