• State Suggested Answer
  • Replies 10 replies
  • Answers 2 answers
  • Subscribers 25 subscribers
  • Views 9290 views
  • Users 0 members are here
Options
Related

Cross forest group nesting report

kevin.willenborg
over 5 years ago

I have set the discovery for AD to collect group nestings as needed -but I need to make a report now for it.

Needs- 

Required fields Domain and Group name to input to report nested information on.

Output

Domain name, Group name, OU path to group, domain group nested name, domain of that group nesting, 

List of users in the groups that are in the other forest, that the group is nested into Forest domain local group.

ForestA, DomainlocalForestAgroup,  ForestB, DomainGlobalGroupForestBgroup - expand all group memberships found nested.

Parents
  • 0 over 5 years ago

    Hello,

    I am looking at our Domain Groups and Members report which seems to have all the requested input and Output fields. Have you tried that report with the last parameter "How to would you like to handle nested groups and their members" and selecting the "Expand Inline including members of Domain Users groups" option?

    Thank you,

    Philip

  • 0 over 5 years ago in reply to Philip.Isukuru

    Would like the report to list the groups and or user that are nested (as you know either can be nested cross forest and Ideal if we have discovered the other forest already (like we have) would like to expand that group also in the report.

  • 0 over 5 years ago in reply to kevin.willenborg

    In the Reporter Library, under Active Directory, there is an existing report, Domain Groups and Members.  if you change the last parameter to "Expand Inline...", you can see all of the groups and members, recursively, for the group, including groups from foreign domains, assuming they were collected..  If you want to include additional information for the included foreign members, you can click the Add Fields button on that last parameter and include extra attributes (but only if a AD discovery was created for the foreign domain)   

    Is this what is wanted?

Reply
  • 0 over 5 years ago in reply to kevin.willenborg

    In the Reporter Library, under Active Directory, there is an existing report, Domain Groups and Members.  if you change the last parameter to "Expand Inline...", you can see all of the groups and members, recursively, for the group, including groups from foreign domains, assuming they were collected..  If you want to include additional information for the included foreign members, you can click the Add Fields button on that last parameter and include extra attributes (but only if a AD discovery was created for the foreign domain)   

    Is this what is wanted?

Children