Another small one today, the script below will generate a nice csv export of every single group and it’s active user membership from Active Directory. The next step would likely be to turn it into a nice Pivot Table for reviewing.

It should be fairly straightforward to change it to show all users or all users & computers etc as required.

Requirements

• PowerShell Active Directory module – https://docs.microsoft.com/en-us/powershell/module/addsadministration/?view=win10-ps
• Read-Access to Active Directory

The Script

Replace the $ExportLocation variable with the location you want to export the result to.

$ExportLocation = "********\ADAxport.csv"

# Get a list of all Active Directory groups
$ADGroupNames = Get-ADGroup -filter * | sort Name | select Name, SamAccountName
$ExportData = @()

# Set the current index to 1 (Used for a progress bar)
$currentIndex = 1

# Loop through all groups
foreach($GroupName in $ADGroupNames) {
    # Show a nice progress bar
    Write-Progress -Id 0 -Activity "Building report from Active Directory" -Status "$currentIndex of $($ADGroupNames.Count)" -PercentComplete (($currentIndex / $ADGroupNames.Count) * 100)

    # Get all membership of a given group and select only the users
    $GroupMembership = Get-ADGroupMember -Identity $GroupName.SamAccountName -Recursive | Where {$_.objectClass -eq "user"} | select distinguishedName
    # Retrieve all of the active users from the list, selecting only the name
    $GroupMembershipUsers = $GroupMembership | ForEach-Object {Get-ADUser -Identity $_.distinguishedName -Properties Enabled} | select Name

    # For each member add a new object to the ExportData array
    foreach($User in $GroupMembershipUsers) {
        $ExportData += [PSCustomObject]@{
            Group = $GroupName.Name
            User = $User.Name
        }
    }

    # Increment the index
    $currentIndex++;
}

# Reset the progress bar
Write-Progress -Id 0 -Activity " " -Status " " -Completed

$ExportData | Export-Csv -Path $ExportLocation -NoTypeInformation