PowerShell for AD group reports

PowerShell for AD group reports

Real-time insights on group membership, type, and scope can help Active Directory (AD) administrators manage group objects better. Many administrators use Microsoft's PowerShell technology to run basic queries and pull detailed information. Below are some key PowerShell scripts and commands for generating AD group reports. 

Group membership reports

Get-ADGroupMember -Identity administrators

Distribution group list

Get-ADGroup -Filter 'GroupCategory -eq 0' -Properties *

Distribution group members list

Get-ADGroup -Filter 'GroupCategory -eq 0' -Properties * Get-msoluser

Nested group reports

Limitation: Can not generate with a single cmdlet. A script has to be written for retrieving members and then consecutively retrieving groups for the result. After comparing the DN to eliminate duplicates the same process has to be repeated for each member of the selected group.


    • Related Articles

    • Generate an Activity Report for Microsoft 365 Groups and Teams

      Introduction The activity reports available for Microsoft 365 groups and Teams can be beneficial for administrators in an organization. Microsoft 365 teams group activity reports provide insight into group activities, group workloads, group counts, ...
    • PowerShell for AD user reports

      Real-time insights on user account status and activity can help AD  administrators manage accounts better. Many administrators use Microsoft's PowerShell scripts to generate Active Directory reports  and pull detailed information. Below are some ...
    • PowerShell as an AD group management tool

      Group management can be quite a challenge for Active Directory (AD) administrators day in, day out. Many administrators use Microsoft's PowerShell technology to perform basic AD user management tasks. Below are some key PowerShell scripts and ...
    • How to find unused Exchange Online mailboxes

      What are unused Exchange Online mailboxes and how to identify them? Unused Exchange Online mailboxes are user mailboxes which are currently not being used by their users. There are 3 ways in which we can identify if a mailbox is unused or not. They ...
    • PowerShell as an AD user management tool

      User management can be quite a challenge for Active Directory (AD) administrators day in and day out. Many administrators use Microsoft's PowerShell technology to perform basic AD user management tasks. Below are some key PowerShell scripts and ...