This article describes how to use the Get-ADGroupMember command-line tools to perform administrative tasks for Active Directory in Windows Server.

Active Directory Domain Services (AD DS) uses DNS as its domain controller location mechanism. When any of the principal Active Directory operations is performed, such as authentication, updating, or searching, computers use DNS to locate Active Directory domain controllers. In addition, domain controllers use DNS to locate each other.

PowerShell is a task-based command-line shell and scripting language built on .NET. PowerShell helps system administrators and power-users rapidly automate tasks that manage operating systems (Linux, macOS, and Windows) and processes.

PowerShell commands let you manage computers from the command line. PowerShell providers let you access data stores, such as the registry and certificate store, as easily as you access the file system. PowerShell includes a rich expression parser and a fully developed scripting language.

The Get-ADGroupMember cmdlet gets the members of an Active Directory group. Members can be users, groups, and computers.

The Identity parameter specifies the Active Directory group to access. You can identify a group by its distinguished name, GUID, security identifier, or Security Account Manager (SAM) account name. You can also specify the group by passing a group object through the pipeline. For example, you can use the Get-ADGroup cmdlet to get a group object and then pass the object through the pipeline to the Get-ADGroupMember cmdlet.

Prior to PowerShell, you had no direct way to collect group membership of an Active Directory group. If you needed to know who was part of an Active Directory security group or check members of more than one security groups, you had to either check using the GUI tool manually or design a VB script to check the group membership. The task to check group membership of security groups has been changed drastically with PowerShell. Now with just a single PowerShell cmdlet you are able to get the group membership of a specific or multiple security groups. What you can do is just use the Get-ADGroupMember PowerShell cmdlet. The Get-ADGroupMember PowerShell cmdlet requires that you provide a group name to check the members for. For example, the cmdlet below will list the group members of the administrators security group in the Active Directory environment.

Now you can find some examples in this video;

Please subscribe to support our channel.
To be aware of our new videos please subscribe our channel.

Visit our website https://sdk-it.com
Visit our youtube channel
Watch IT & Learn IT & Apply IT.

Enjoy!