Полезное‎ > ‎CMD‎ > ‎dsquery‎ > ‎

dsquery group

DSQuery group

Search for Groups in active directory.

      DSQuery Group [{StartNode | forestroot | domainroot}]
	   [-o {dn | rdn | samid}]  [-scope {subtree | onelevel | base}]
            [-name Name] [-desc Description]  [-samid Filter]
			   [{-s Server | -d Domain}] [-u UserName] [-p {Password | *}]
			      [-q] [-r] [-gc] [-limit NumberOfObjects]  [{-uc | -uco | -uci}]
   StartNode | forestroot | domainroot  The node in the console tree where the search starts.
                                        forestroot = search using the global catalog. 
   -o       The format used to display the search results.
              dn = distinguished name. 
              rdn = relative distinguished name.
              samid = Security Accounts Manager (SAM) account name.
   -scope   The scope of the search:
              subtree = subtree that is rooted at the start node in the console tree.
              onelevel = immediate children of the start node only.
              base = single object that the start node represents.
            If forestroot is the StartNode, then subtree is the only valid scope. 
   -name    Search for group(s) whose name attribute(CN) matches Name.
            For example, "br*"
   -desc    Search for group(s) whose description matches. For example, "contractor*"
   -samid   Search for group(s) whose SAM account name matches SAMName 
   -s       Server to connect to (Default=the domain controller in the logon domain.)
   -d       Domain to connect to.
   -u       Username with which the user logs on to a remote server. 
   -p       Password     (UserName or Domain\UserName or Username@domain.com)
   -q       Quiet, suppress all output
   -r       Recursive search (follow referrals)
   -gc      Use the AD global catalog during the search.
   -limit   The maximum number of objects to return, default=100.
   -uc      Unicode format
   -uco     Unicode format for output only
   -uci     Unicode format for input only

DS* commands are available on networked machines with the server role A.D. Domain Services installed, Domain Controllers (or for XP users: XP Professional).


Find all groups on the current domain with a name that starts with 'Admin'

C:\> dsquery group -name Admin*

Find all groups in the 'Groups' OU

C:\> dsquery group ou=Groups,ou=AcmeCo,dc=ss64,dc=com

“It is to Scotland that we look for our idea of civilization” - Voltaire

Related commands:

DSAdd - Add object
DSMod - Modify object
DSGet - Display object 
DSMove - Move object
DSQuery - Search for objects 
DSRM - Delete object
CSVDE - Import or export AD info in CSV format.
LDIFDE - Edit AD Objects, extend schema, import or export AD information.