How can I export Active Directory Group Information?

Hi, I need to compare the group membership of 2 users.
Whats the best way? I think I need to export the group membership information out of AD. But how? I looked at Dsquery but i cant seem to get any group information out.

Has anyone got any ideas!

Thanks

Jacko

CSVDE and LDIFDE are two tools that are supplied with Windows 2000/2003 server that will do what you want. CSVDE imports from and exports to CSV format while LDIFDE does the same with LDIF files (Ldap Data Interchange Format). Their syntax can be found in the Windows Server command line reference

Hi, I need to compare the group membership of 2 users.
Whats the best way? I think I need to export the group membership information out of AD. But how? I looked at Dsquery but i cant seem to get any group information out.

Has anyone got any ideas!

Thanks

Jacko

Not sure if this is what you are looking for. Try *dsget* for finding groups in which a user is a Member Of.

dsget user user_dn -memberof

user_dn specifies the distinguished name of the user object for which you want to display group membership.