Tweet
I am new to Hyena and we are running v7.7c. I wanted to knnow if there is a report that I can run that will show all empty groups in AD?
Thanks
Thanks
-
-
Re: Report empty groups in AD
To view members of groups Hyena uses a group members function, but only outputs when a member is found. So, empty groups won’t show because there are no members to display.
One suggestion would be to export your list of groups, then export the group members list, and somehow compare the two to find those that were missing from the second export. -
Re: Report empty groups in AD
Actually, Development just gave me another idea:
Add the Members attribute to your Group query under File->Manage Object View->AD Queries.
Then run that query and sort on the Members column to see those that are empty.Comment
-
Re: Report empty groups in AD
Fantastic. That worked. Thank you for the quick reply.Comment
-
Re: Report empty groups in AD
Be careful though, if you have a large group like Domain Users, it will show blank. Even though it is not blank. I only found a couple like this when doing exactly what Chuck described.
[This message has been edited by Trammel (edited 12-29-2010).]Comment
-
Re: Report empty groups in AD
I use this all the time to veryfy we don't have any stale groups.
Create a new custom query and add this to the LDAP search filter, "(&(objectCategory=group)(!member=*))" without the quotes. Be sure to select sub containers alo or it will be limited to the contaner you initiate the search on.
Hope this helps!Comment
-
Re: Report empty groups in AD
When I created this query it came back with all of the groups that I have in AD. Obviously I did something wrong.
Quote: Originally posted by diebos:
I use this all the time to veryfy we don't have any stale groups.
Create a new custom query and add this to the LDAP search filter, "(&(objectCategory=group)(!member=*))" without the quotes. Be sure to select sub containers alo or it will be limited to the contaner you initiate the search on.
Hope this helps!Comment
Comment