Re: Dump Domain Admins group to text?

From: Ferdie (ferdie_at_sand.rr.com)
Date: 06/10/05


Date: Thu, 9 Jun 2005 16:04:17 -0700

It seems like the most simple things are so hard to find a solution for.
The Net Group command serves my needs well.

I haven't explored the adminpak for 2k3 yet. Finding the right command to
do the same looks daunting using dsquery. Although it might be more
powerful, the simple solution works well.

Thanks,
Ferdie

"Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
news:eDF4ryTbFHA.1044@TK2MSFTNGP10.phx.gbl...
> Hi Ferdie.
>
> I should have been more specific. If you have an XP Pro computer in your
> Windows 2000 domain you can use it as I described to use the AD command
> line tools AND intall Group Policy Management Console on it to make it
> much easier and give you many more options to manage your Group Policy in
> a Windows 2000 domain. Admipak for Windows 2003 is a free download from
> Microsoft. --- Steve
>
>
> "Ferdie" <ferdie@sand.rr.com> wrote in message
> news:OCU%23VvTbFHA.2696@TK2MSFTNGP09.phx.gbl...
>> Win2k only right now.
>>
>> THANKS!
>>
>> "Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
>> news:ufB2FRSbFHA.3200@tk2msftngp13.phx.gbl...
>>> Try the command [ net group "domain admins" ]. You could pipe it to a
>>> text file as in net group "domain admins">file.txt. If you install
>>> adminpak for Windows 2003 on a Windows XP Pro domain computer you can
>>> also use the AD command line tools on that computer such as dsquery and
>>> dsget for groups as described in the links below. --- Steve
>>>
>>> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/46ba1426-43fd-4985-b429-cd53d3046f01.mspx
>>> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/96a4a5ee-ee72-44d5-845f-71b2de33d441.mspx
>>>
>>> "Ferdie" <ferdie@sand.rr.com> wrote in message
>>> news:%2345n$CSbFHA.2128@TK2MSFTNGP15.phx.gbl...
>>>> Does anyone know how to dump the Domain Admins group to a text file?
>>>> I'm trying to use adfind, but I'm not much of an LDAP querier.
>>>>
>>>
>>>
>>
>>
>
>



Relevant Pages

  • RE: Restrict logon hours
    ... Change Logon Times for a User Account ... Edit the user account properties by using the net user command. ... Enforce Logon Time Restrictions Using Group Policy ...
    (microsoft.public.win2000.group_policy)
  • RE: Applying a GPO to all computers in the domain?
    ... I tried the gpresult command and got the following information: ... It does say Group Policy was applied from: ... >> created a new Organisational Unit and dragged all the client computers into ...
    (microsoft.public.windows.server.active_directory)
  • Re: Remote Registry always set to disabled after startup?
    ... My system has Mail Enable Enterprise 2.33 installed and on Feb 24, there was a massive attack on an unpatched critical vulnerability on ME, causing a leak of all encrypted passwords hashes. ... Except group policy, some scripts and commands can stop services as well. ... The applied group policy can be exported by the gpresult command. ...
    (microsoft.public.windows.server.general)
  • Re: krb5kdc_err_s_principal_unknown on Windows Kerberos Domain
    ... command line with the parameter "tickets". ... fail group policy replication for users. ... I went to the command line and tested this unusual syntax, ...
    (comp.protocols.kerberos)
  • Re: Syncing time to the Domain Controller
    ... Well you should be able to use Group Policy via a "startup" script to ... To configure a client computer for automatic domain time synchronization ... Open a Command Prompt. ...
    (microsoft.public.windows.group_policy)