Is there a way to view the members of an Active Directory group if you aren’t a domain admin and can’t log into to a domain controller?

Absolutely. From a computer that’s a member of the domain, open a command-prompt and run a:

NET GROUP "group name" /DOMAIN

Unless your administrators have changed the stock permissions on the group object you will be able to view the membership that way.

You can use AD Users and Computers even if you’re not an administrator, but this, at least, can be done w/o installing anything.

Related Posts:

  1. Powershell: A positional parameter cannot be found that accepts argument “xxx”
  2. Cannot get Kerberos service ticket: KrbException: Server not found in Kerberos database (7)
  3. What are the differences between LDAP and Active Directory?
  4. Query to list all users of a certain group
  5. What are CN, OU, DC in an LDAP search?
  6. How can I find out what AD groups I’m a member of?
  7. Find name of Active Directory domain controller
  8. How can I figure out my LDAP connection string?
  9. What is ADFS (Active Directory Federation Services)?
  10. LDAP query in PowerShell
  11. Authenticating in PHP using LDAP through Active Directory
  12. Command line to list users in a Windows Active Directory group?
  13. What is Active Directory Domain Services and how does it work?
  14. Windows Active Directory naming best practices?

Leave a Comment