SYNOPSIS

Gets the Active Directory groups that have a specified user, computer, group, or service account.

CMDLET ALIASES

DESCRIPTION

The Get-ADPrincipalGroupMembership cmdlet gets the Active Directory groups that a user, computer, group, or service account is a member of.

The Identity parameter specifies the user, computer, or group object that you want to determine group membership for. You can identify a user, computer, or group object by its distinguished name, GUID, security identifier, or SAM account name. You can also specify a user, group, or computer object variable, such as $<localGroupObject>, or pass an object through the pipeline to the Identity parameter.

For example, you can use the Get-ADGroup cmdlet to retrieve a group object and then pass the object through the pipeline to the Get-ADPrincipalGroupMembership cmdlet. Similarly, you can use Get-ADUser or Get-ADComputer to get user and computer objects to pass through the pipeline.

This cmdlet requires a global catalog to perform the group search. If the forest that contains the user, computer, or group does not have a global catalog, the cmdlet returns a non-terminating error. If you want to search for local groups in another domain, use the ResourceContextServer parameter to specify the alternate server in the other domain.

SYNTAX

Get-ADPrincipalGroupMembership [-Identity] <ADPrincipal> [-AuthType {Negotiate | Basic}] [-Credential <PSCredential>]
[-Partition <String>] [-ResourceContextPartition <String>] [-ResourceContextServer <String>] [-Server <String>] [<CommonParameters>]

EXAMPLES

Get-ADPrincipalGroupMembership Michael_Kanakos | select name

• Returns groups michael_kanakos
• selects only the name of the group
  
  

Get-ADPrincipalGroupMembership Michael_Kanakos | Get-ADGroup -prop description | select name, description

• generates a list of groups for Michael Kanakos
• pipes the output from Get-AdPrinicpalGroupmembership to Get-ADComputer because the first cmdlet doesnt have the group description information available to display.
• final output is the groups and the description field for each group
  
  

Get-ADPrincipalGroupMembership Michael_Kanakos | Where-Object {$_.name -like "role*"} | Get-ADGroup -prop description | `
select name, description

• generates a filtered list of groups that contain the word ROLE in the name
• passes the the filtered list to the Get-ADComputer cmdlet to retreive group descriptions
• final output is a list of groups that contain the word ROLE and their descriptions
  
  

Get-ADPrincipalGroupMembership Michael_Kanakos | Where-Object { $_.name -like "sg*" } | select name | ogv

• Returns list of groups that Michael is a member of
• filters for only groups that start with SG
• outputs results to gridview.

Get-ADPrincipalGroupMembership Michael_Kanakos | get-adgroup -prop description | select name, description | `
Where-Object { $_.name -like "DL*" } | sort name

• Returns name and description of groups that Alan is a member of
• filters for only groups that start with DL