Announcement

Collapse
No announcement yet.

Report empty groups in AD

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • gpampill
    replied
    Re: Report empty groups in AD

    When I created this query it came back with all of the groups that I have in AD. Obviously I did something wrong.


    Quote: Originally posted by diebos:
    I use this all the time to veryfy we don't have any stale groups.

    Create a new custom query and add this to the LDAP search filter, "(&(objectCategory=group)(!member=*))" without the quotes. Be sure to select sub containers alo or it will be limited to the contaner you initiate the search on.

    Hope this helps!

    Leave a comment:


  • Guest's Avatar
    Guest replied
    Re: Report empty groups in AD

    I use this all the time to veryfy we don't have any stale groups.

    Create a new custom query and add this to the LDAP search filter, "(&(objectCategory=group)(!member=*))" without the quotes. Be sure to select sub containers alo or it will be limited to the contaner you initiate the search on.

    Hope this helps!

    Leave a comment:


  • Guest's Avatar
    Guest replied
    Re: Report empty groups in AD

    Be careful though, if you have a large group like Domain Users, it will show blank. Even though it is not blank. I only found a couple like this when doing exactly what Chuck described.

    [This message has been edited by Trammel (edited 12-29-2010).]

    Leave a comment:


  • gpampill
    replied
    Re: Report empty groups in AD

    Fantastic. That worked. Thank you for the quick reply.

    Leave a comment:


  • Guest's Avatar
    Guest replied
    Re: Report empty groups in AD

    Actually, Development just gave me another idea:

    Add the Members attribute to your Group query under File->Manage Object View->AD Queries.

    Then run that query and sort on the Members column to see those that are empty.

    Leave a comment:


  • Guest's Avatar
    Guest replied
    Re: Report empty groups in AD

    To view members of groups Hyena uses a group members function, but only outputs when a member is found. So, empty groups won’t show because there are no members to display.

    One suggestion would be to export your list of groups, then export the group members list, and somehow compare the two to find those that were missing from the second export.

    Leave a comment:


  • gpampill
    started a topic Report empty groups in AD

    Report empty groups in AD

    I am new to Hyena and we are running v7.7c. I wanted to knnow if there is a report that I can run that will show all empty groups in AD?

    Thanks
Working...
X