How to export a list of all user and computer accounts and security groups in Active Directory?
Hell. I am looking for an efficienct way to export a list of all user and computer, as well as all security groups and their memberships. We have a need to be able to generate a report of all recently joined domain machines, all recently created domain user accounts, all disabled and locked accounts, and any accounts that may have failed a logon in the last 24 hours.
We also would like to document the membership of all of our admin security groups, including all nested members, so that we know what is the security state of our admin accounts and groups.
If anyone has any ideas of an efficient, reliable way to do this, please let me know.
__________________
One day I too shall have an Aston Martin Mr. Bond!
Have you tried using dsquery? I am sure that you should be able to export all accounts and groups? I do not know if it is easy to export the list of all the members of each group but I'm sure that with a little bit of effort you should be able to do it.
I think one of the only things you might encounter an issue with is enumerating the membership of groups like Domain Users, Domain Computers etc. as I believe they are dynamically calculated and dsquery may not be able to do dynamic calculations for you.
