windows - Active Directory - a script to find all users that aren't in a set of groups? -
I have a set of 10 AD groups, what I need is to programmatically find out who is in the AD domain The user is not a member of those 10 groups. There is only one domain, I know that it is possible to do ADO SQL queries in VBSSP, but I was thinking (if there is a canned script).
I think the way a hack can be:
- dump all users to 10 groups
- dump all users to the domain
- Play a windfill on 2 dumps
Any ideas?
(& amp; (object category = person) ( & Amp; (Member! = = CN = Group 1, DC = Company, DC = Local) (! MemberOf = CN = Group2, DC = Company, DC = Local) (! MemberOff = CN = Group3, DC = Company , DC = Local)))
Comments
Post a Comment