Resolving Nested Group

• Below script will list all group in domain :-

$domainObj = [System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain()
$PDC = ($domainObj.PdcRoleOwner).Name
$SearchString = "LDAP://"
$SearchString += $PDC + "/"
$DistinguishedName = "DC=$($domainObj.Name.Replace('.', ',DC='))"
$SearchString += $DistinguishedName
$Searcher = New-Object System.DirectoryServices.DirectorySearcher([ADSI]$SearchString)
$objDomain = New-Object System.DirectoryServices.DirectoryEntry $Searcher.SearchRoot = $objDomain

$Searcher.filter="(objectClass=Group)"
$Result = $Searcher.FindAll()

Foreach($obj in $Result)
{
$obj.Properties.name

}

• Below script will list all members of particular group in domain ( by changing objectclass with name and obj.Properties.name with obj.properties.member ) :-

$domainObj = [System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain()
$PDC = ($domainObj.PdcRoleOwner).Name
$SearchString = "LDAP://"
$SearchString += $PDC + "/"
$DistinguishedName = "DC=$($domainObj.Name.Replace('.', ',DC='))"
$SearchString += $DistinguishedName
$Searcher = New-Object System.DirectoryServices.DirectorySearcher([ADSI]$SearchString)
$objDomain = New-Object System.DirectoryServices.DirectoryEntry $Searcher.SearchRoot = $objDomain

$Searcher.filter="(name=Secret_Group)"
$Result = $Searcher.FindAll()

Foreach($obj in $Result)
{
$obj.Properties.member

}

• In Nested Group, Output of the above script give another group in “CN=” . Keep changing the value of search.filter to get the user name