Indirect Group Members

[Guest]

Using Hyena v6.6, I am able to drill down into a domain member server, see the Domain group, and then have it list the members of the group out of the top domain. i.e. Domain name is Foo, and I can drill down into the member server to Foo\Domain Admins group and see all the individual members from the Foo domain. However, I need to get this in some exported format and tried to use exporter pro, but I can't get it to export this same information.

TIA

[cmccullough]

Re: Indirect Group Members

There really wouldn't be a way to do this. There is an option for indirect members of groups, but this only works on AD. A member server's local groups are not in AD, which is why it isn't expanding those out for you.

[Trammel]

Re: Indirect Group Members

Is there a way to change the view for "Direct and Indirect users" in Hyena v8.0? Currently I am seeing cn, Display Name, Description, class, Pre-W2K Name, Group Name, cn

[cmccullough]

Re: Indirect Group Members

Unfortunately there isn't, those fields are hard-coded. Exporter Pro has a way to add fields using an advanced method, though.

[Trammel]

Re: Indirect Group Members

I am not having much luck using exporter pro when having a global group selected. I am not getting any data.

[cmccullough]

Re: Indirect Group Members

Give us the exact steps you are taking.

[Trammel]

Re: Indirect Group Members

Global Security group is in the right pane.
Select Tools, Exporter Pro, export from selected object.
Default Existing export configurations called Member of groups. Chose settings and then export properties of the windows NT?Local Group Members. Under the NT?Local Groups tab, I have "group export options" checked, with path to the text file and the radio button marked for local and global groups. "Group Member Export Options" is checked and the output file name path is filled in with the same radio button as above.

[cmccullough]

Re: Indirect Group Members

The Windows NT/Local Group exports are for either Windows NT domains, or local groups on computers. Since you are using Global Groups in an AD domain, you need to use the Group Members export under Active Directory(Users,Groups).

[Trammel]

Re: Indirect Group Members

Ah, alright that worked. Though I am trying to get department for the user account in this report and can't seem to grab that information.

[cmccullough]

Re: Indirect Group Members

This thread gives instructions on how to add fields to the group members export:

http://www.systemtools.com/toolboard/showthread.php?1396-exporting-group-with-contacts