PowerShell: Export Active Directory Group Members

131 thoughts on “PowerShell: Export Active Directory Group Members”

1. So, it’s possible to output all users in a single group to a .csv file, but that means you have to know all the groupnames and change the input parameters for the powershell each time. Is it possible to output all users against all groups in a single domain to a .csv

   Groupname1 , , , etc
   Groupname2 , , , etc
   Groupname3

   I’m looking to check the users in each group and export them to excel as single lines for auditing and further analysis.

   • This will export the groupName and members on one line.

     # Define the group name
     $groupName = “group1”

     # Retrieve the members of the specified group and join their SamAccountNames into a single string
     $members = (Get-ADGroupMember -Identity $groupName | Select-Object -ExpandProperty SamAccountName) -join “,”

     # Create a custom object with the group name and the members in one cell
     $groupDetails = [PSCustomObject]@{ GroupName = $groupName; GroupMembers = $members }

     # Export the custom object to a CSV file
     $groupDetails | Export-Csv -Path “C:\temp\groups.csv” -NoTypeInformation

     With our software it does this by default. Click “Group Reports” -> General -> All groups. Make sure the members column is added.

     

2. This article is so clear and easy to follow. Thank you.
   It works for some groups and for others I see an error “Get-ADGroupMember : Cannot find an object with identity: ‘Pwa xxx’ under: ‘DC=abc,DC=abc,DC=abc’ “.
   I see this has been answered in a previous comment but how do I know the name of the server or domain controller for a particular group?

3. We have multiple domain controllers, how can we get the output for a group in a
   different DC

   Get-ADGroupMember : Cannot find an object with identity: ‘DC2XXYY-ABCD’ under:
   ‘DC=dc2,DC=int,DC=us’.

   the same command works for groups in dc1

   • To get group members from a specific domain controller use the -server parameter.

     Get-ADGroupMember -server dc2 -identity “HR Full”

4. Hi,
   Is it possible to to retrieve a list of deleted users for a particular group?
   Thanks

5. I want the following command to search the entire directory
   Get-ADGroupMember -identity “TEST_GROUP_NAME”

6. Hi Robert Allen,
   can you help please!
   I need a info with all local administrators on servers and computers ,but excluded Domain Admins Group

   • Hi,

     See this article:
     https://activedirectorypro.com/find-local-administrators-on-all-computers/

     Also check out the Local Admin Report Tool

7. Hai Robert Allen,

   How to get user groups names using logon name and password with power shell script and LDAP bind connection.

8. Can i get the full script which i can run in azure DevOps pipeline and get the details of all AD groups as well as group users.

9. Thanks Robert! Helped a lot

   • No problem!

10. Hi,
    You did a great job!

    I would like to add few details at Step2 if you don’t see the groups, if the AD has azure information protection.
    First you will need to check the name of the group in AD then use the following command in PowerShell:
    Get-ADGroupMember -identity “Group_Name” | select name

    All the best,
    Alex Gheorghisoara

11. This is very clean and retrieves the information I need for a compliance report. However, I have been asked to transpose data such that the export is formatted such that each group becomes a column header, and the columns contains all members of the “header” group. Any help is greatly appreciated.

    Thank you!

12. Hi Robert,
    this is great – any idea how to omit specific emails from results?

13. Thank you, this info was useful!

14. Hi
    How to export the owners name for a list of service accounts from Powershell ?

15. Hi
    How do I get groups within a nested group please? So I have a parent group, then within that, I have nested groups. I wanted those nested groups (not users)

    Thanks

16. thank you so much. This blog helped me.

17. Hi ,

    I have 120 dl names in one CSV file. How I can get the first member of that all dl using script

18. Hi Robert, thank you for sharing all these helpful commands and PS-Scripts.

    I am trying to create a script that will export all users with their manager name to a csv file. (i got this part done already), I used: get-aduser -Filter * -Properties Manager | Select-Object Name,sAMAccountName,Manager | export-csv C:\temp\UsersManagersExample.csv -notypeinformation.

    But also that shows all the membership groups for each user. I am not sure what is the best way to achieve this. Can you help? I am quite sure that there is a way to get this done using powershell.

    So I am trying to get a list of all managers and their reporties plus the membership assigned to each user.

    Thank you in advance!
    Best Regards,

    Fady

19. Thanks ,Its very useful for audit purpose, I have created around 24 .CSV file. How do I can add all in one excel in different tabs in sing excel.

    Thanks again
    Vaibhav Joshi

20. Hi Robert, how would I get a listing of all members in an AD group that has members from 2 different domains (universal group). Is this possible? Thanks.

21. How do we find the AD groups assigned to a Role?

22. Hi could you point me in the right direction? Any help would be appreciated. At step 3 I’m running into the following error….

    Get-AdGroupMember : An unspecified error has occurred
    At line:1 char:1
    + Get-AdGroupMember -identity GROUP-TESTA
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo : NotSpecified: GROUP-TESTA:ADGroup) [Get-ADGroupMember], ADException
    + FullyQualifiedErrorId : ActiveDirectoryServer:0,Microsoft.ActiveDirectory.Management.Commands.GetADGroupMember

    • Does the group have members from another domain? This command only works if the group members are all from the same domain.

      • How can I get properties like samaccountname, mail, etc for a group that has members from more than one domain?

23. I hate to ask this because I should know. How do I get it to export the AD username instead of Last, First?

24. Hi Robert, bit late to the party here. I am doing something similar but I wanted to be able to export only names that do not match part of a string to the CSV e.g names that do not match “admin*”. I can manipulate the CSV afterwards but would be great if I could do it as part of PS.

25. Exactly what i am looking for Thank you Robert. I mostly get all the required stuff from activedirectorypro.com

    • Thanks Kuldip. Glad you found what you needed.

26. i need an export for names, email addresses, title, location and department…. is that possible?

    • Yes. I have two tools that make this really easy. You can download a free trial of them both.

      1. Active Directory Reporting Tool
      2. AD User Export Tool

27. Short and sweet, thanks!

    However, FOR NOOBS LIEK ME, in Step 4, it’s confusing that after “Export-csv -path” you got new empty line and then “C:OutputGroupmembers.csv -NoTypeInformation” which doesn’t work.

    Obviously, it should be all together and have a backslash “\” to be able to export to the C-drive root IF it works by other policies. IMO would be better to point the output file to the “C:\temp\filename.csv” which is probably more accessible.

    • Vozdra, it has been corrected. Thanks for pointing this out.

28. This is one of the best explanations that I could find – Thanks!

    Would you know how to deal with a group with a large amount of members? My results are “The size limit for this request was exceeded”

29. How do we find, when a user was added to a particular AD group and who added the user.

30. Just one word – AWESOME!!

    • Thanks for the feedback Paul

31. Hi Robert,
    Thank you for your post. How do I export group members from a specific domain. When I ran the Get-AdGroupMember command, it gets it from a specific domain.

    • You can use -server to specify the domain to export from.

32. Very helpful tutorial. Thank you very much…

33. How would you filter down to a specific string in the Active Directory Domain Services Folder?

    • Not sure, what exactly are you trying to accomplish?

34. Hi Robert,
    Thank you for your post. How do I export group members from a specific domain. When I ran the Get-AdGroupMember command, it gets it from a different domain.

35. Hi Robert,

    The Commands are working, But I need to export the members from Multiple Groups. Is there any commands for that ?

36. Thanks !

    • No problem

37. It worked! Thanks for the help! Great page with great examples.

    • Zo, you are welcome.

38. VERY informative.

    Thank you, Robert!

39. This is excellent! Simple to follow. That’s how I like it. Cheers.

40. Very Helpful. Thanks for sharing.

41. This is Awesome.. Helped me a lot.

    I have two quick questions:
    1. How can I see Group name and Member name as output?
    2. How can I choose multiple groups?

    Thanks in advance.

42. Clear and concise…thank you!

    • No problem 🙂

43. Exactly What I needed. Thank You!

    • Good day ?, how to get 8000 members list from 1 AD group using cmdlet Get-AdGroupMember and export it to cvs file ?

      Thanks a lot and have a nice day ?

44. This is extremely handy especially for someone who is still learning Powershell. I wondered if this script could be configured to run in one domain and pull data from a group in another? You would have to be able to add ID and password from the other domain for it to work.

45. It was really useful. Thank you. Is there a possibility to add First name and Last name in the output from the AD group

    • Raj, my AD User Export Tool includes first and last name and several other user properties. It can be customized to export exactly what you need.

46. very interesting/handy…
    I have a range of AD groups I want to list (eg all AD groups starting g_abcCouncil) how would I modify the filter command ?

    (I tried -filter g_abcCouncil* but got a parsing error, not supported)

    • You want to list just the groups and sort them or the groups and members? This would get all groups and sort them get-adgroup -filter* | sort

47. Thanks , this worked

48. Thank you so much for this! As a beginner, I wanted a quick way of getting the list of users from a specific group. I searched it for weeks and finally found this post! . With these commands, lot of hours will be saved.

49. Thanks !

50. This helped so much. Thank you!!!

51. Very Useful. Thanks

52. Thanks for this, turned a slog of a job into a 5 min breeze! 🙂

53. Wow this is great. clear tutorial and easy to follow. Works exactly as I had hope. Thank you Robert!!!

54. This was perfect. Thank you!

55. Amazing how simple you made this! thanks!!

56. Thanks for this 🙂

    • No problem

57. Hello Robert,

    How do i get the list of member from group A, group B, i.e group B is not a sub group of group A
    and i don’t want to right separate command like this Get-AdGroupMember -identity “Group A” | select name.

    I Tried Get-AdGroupMember -identity “Group A” “Group B” | select name and i got error :/

    Thanks for the help.

58. Hi,

    Kindly help me to get the user ids instead as there are 2000 profiel needs to be reset.

    Thanks

59. Truly appreciate this, best explanation and clear instructions

60. thanks for good share , easy to understand and quick

61. I want the CSV to list the Group name in Column A and the member in Column B. How would I do that?

62. Can you export samaccountname and name together? I tried it in various ways, but can only seem to do one or the other.

    • Here you go

      Get-ADGroupMember -Identity HR-N-Drive-RW -Recursive | Get-ADUser | Select-Object Name,
      SamAccountName

      • THANK YOU! I really needed the emails listed as well.

      • THANKS!! I was searching tooooo far away …

63. This is awesome! Do you know how to also get users email address?

    • Here is an example that will list users name and email of a group

      Get-ADGroupMember -Identity HR-N-Drive-RW -Recursive | Get-ADUser -Properties Mail | Sel
      ect-Object Name, Mail

      • I LOVE YOU MAN

      • I love you more.

        • 🙂

64. This worked great!

    Amy chance we can add last logon date? Other scripts I tried from the web did not work.

    • Hi Guan,

      I have a separate post that shows how to get the last logon date with PowerShell and the GUI.

      https://activedirectorypro.com/last-logon-time/

65. Awesome Article!

    • Thanks Latau

66. really informative and useful commands for AD admins

67. Awesome Thanks!

    • No problem, I hope you find it useful.

68. WOW this is well put together. Thanks.

    • Richard,

      No problem.

69. good article, clear and EZ to use,
    thank you.

    • You’re Welcome!

70. Thank you!

    • Tamu,

      You’re welcome

71. Thank you! amazing, thank you for your time and sharing the info thanks!!!

    • No problem Edward.

72. What is the powershell command to export AD “Contacts” members of an AD group?

    • Hi, Manny

      This command will list both contacts and users of an AD group.

      Get-ADGroup group-name -Properties member | select-object -ExpandProperty member

      • Thanks big help

        • Hi,
          I need to get the ad details of an user and then all the nested group details of all the AD groups which the user is part of. Can any one tell me how?

      • Hi Robert,

        Such a time saver! When I try to export this to a csv it doesn’t work.
        I usually add | Export-csv -path filepath\filepath\file.csv

        Any ideas?

        • Enzi, did you try it with a drive letter? | export-csv -path c:\filepath\file.csv

73. Hello, Thank you for the post. But I get an error on Step 2: “get-adgroup : Unable to find a default server with Active Directory Web Services running.”

    • Yulia,

      The Powershell Active Directory module uses AD Web services to manage and administer Active Directory. You will need to make sure your server is running AD web services. What version of server are you running?

74. Exactly what I needed. Thanks for the information in easily and quickly digestible format!

    • No problem Jay.

75. Very helpful, thanks!

    • No problem.

    • As many others have said, very helpful Robert, thank you!

76. I’m looking for a similar script to export to csv groups and members within groups:
    group1:member1….
    group1:member1…

    • Hi Richard,

      Just add -Recursive at the end to include members of child groups

      Example

      Get-AdGroupMember -identity HR Full -Recursive

      • Hi Robert,

        What if i have to get entire (All) groups in one excel?

        instead of a specific group, I need to have all my groups with their current users in it.

        • I have a GUI tool for that https://activedirectorypro.com/reporting/

          To do this in PowerShell you would use Get-ADGroup to get all groups and set them to a variable. Then use a for each loop to loop through each group and run get-adgroupmember on each group.

        • Hi Jayan, Did you ever get this to work in Powershell?

          Kind Regards

          • You could try something like this:

            $groups = get-adgroup -filter *

            foreach ($group in $groups) {
            $naam = $group.name
            $members = Get-ADGroupMember -identity $group
            write-host “Group: $naam”
            write-host “————————————-”
            foreach ($member in $members) {
            $memnaam = $member.samaccountname
            write-host “$memnaam”
            }
            }

      • Is it possible to add users from a CSV to a AD group

        • Super easy with this tool
          https://activedirectorypro.com/ad-pro-toolkit/ad-group-management-tool/

          GUI tool and also comes with a PowerShell version.

        • Here’s how I got it to work:

          $date=get-Date -Format “yyyyMMdd”
          $groupList=Get-ADGroup -filter * | sort name | select name
          write-Output “””ADGroupName””,””ADUserSAMAccountName””” | Out-File .\ADGroupMembership-$date.csv
          foreach ($group in $groupList) {
          $memberList=Get-ADGroupMember -Identity $group.name | Select SamAccountName
          foreach ($member in $memberList) {
          write-Output “””$($group.Name)””,””$($member.SamAccountName)””” | Out-File .\ADGroupMembership-$date.csv -Append
          }
          }

      • How to export all groups from any particular member?

        • Get-ADPrincipalGroupMembership username | select name | export-csv -path c:\path

      • Hi,

        I have problem with the bellow command:
        Get-ADGroupMember -identity “Bss_nbe” | select name
        it’s showing only domain users group members, but she is not listing contact members ( insite of the group we have users & contacts, this command show only users )

    • I am trying to extract a list of users given a security group. I know that this is easily accomplished using:

      Get-AdGroupMember -identity “security group name” | select name | Export-csv -path C:\members.csv -NoTypeInformation

      But, what I am trying to do is perform this action given a .csv file of security groups. For example, I have 36 security groups that I would like to query for their respective members. Rather than run the above line 36 times in a row by manually inputing each security group, I would like to say: “Here, take this .csv file, iterate through it one by one and return the members of each group you see, then export all members sorted by each group when you reach the end of the file.

      Any ideas as to how to do this? I’ve tried using a foreach loop but I don’t think you can pass an array to the -identity parameter.

      • Was the script ever confirmed for this? I have around 50 security groups and want to export all the data into 1 CSV file rather than editing the command 50 times per security group.

        Thanks

Comments are closed.