How to export the users of an AD Group.

Posted on January 23rd, 2009

This is the best and fastest way to export all users who are members of a group

dsquery group “CN=Group Name,OU=OU Location,DC=Domain Name,DC=local” | dsget group -members | dsget user -samid -c >>c:\windows\temp\groupmembers.txt

If there are nested groups it might fail with the following error message:

The object class of the target does not match the one specified on the command line.

This error is removed by adding the -c variable as this continues despite the error.

Tags: AD, dsget, dsquery, export, group extraction, script, users
Filed under Scripts/Reg | No Comments »

Advanced AD Replication settings

Posted on August 12th, 2008

Active Directory – Windows 2000 and later

Tip: If you want to override site-link replication settings, look here:

Particularly useful is the paragraph on “Change Notification within a Site”

This would be useful in a situation such as:

- Multiple AD sites located in the same physical site on LAN speed created in order to isolate replication problems from certain servers or applications

- You want replication to be instantaneous within the same physical site, eg, to assist with password resets, group membership changes etc..

Tags: Active Directory, AD, Replication
Filed under Windows 2003 | No Comments »