Active Directory Administration Cookbook

How to do it...

As an admin, you could click groups on the Members tab in the properties of a group and look at its members. When groups are heavily nested, though, this becomes tedious fast. A much better approach is to use Windows PowerShell.

Use the following lines of PowerShell to enumerate all group memberships in Active Directory for a group on a system with the Active Directory module for Windows PowerShell installed:

Import-Module ActiveDirectoryGet-ADGroupMember -Identity "CN=Group,OU=Organizational Unit,DC=lucernpub,DC=com" -Recursive | Out-GridView