dsget user


Display user(s) from active directory.

Syntax DSGET user UserDN [-dn] [-samid] [-sid] [-upn] [-fn] [-mi] [-ln] [-display] [-empid] [-desc] [-office] [-tel] [-email] [-hometel] [-pager] [-mobile] [-fax] [-iptel] [-webpg] [-title] [-dept] [-company] [-mgr] [-hmdir] [-hmdrv] [-profile] [-loscr] [-mustchpwd] [-canchpwd] [-pwdneverexpires] [-disabled] [-acctexpires] [-reversiblepwd] [{-uc | -uco | -uci}] [-part PartitionDN [-qlimit] [-qused]] DSGET user UserDN [-memberof] [-expand][{-uc | -uco | -uci}] Key UserDN Distinguished Name of the user to view. -dn Display the distinguished names -samid Display the Security Account Manager (SAM) account names -sid Display the user security identifiers (SIDs). -upn Display the user principal names (UPNs) -fn Display the first names -mi Display the middle initials -ln Display the last names -display Display the display names -empid Display the employee IDs -desc Display the descriptions -full Display the full names -office Display the office locations -tel Display the telephone numbers -email Display the email addresses -hometel Display the home telephone numbers -pager Display the pager numbers -mobile Display the mobile phone numbers -fax Display the fax numbers -iptel Display the user IP phone numbers. -webpg Display the user Web page URLs. -title Display the titles -dept Display the departments -company Display the company information -mgr Display the managers -hmdir Display the users home directory -hmdrv Display the user's home drive letter -profile Display the user profile paths -loscr Display the user logon script paths -mustchpwd Display whether users must change their passwords at next logon (yes/no). -canchpwd Display whether users can change their password (yes/no). -pwdneverexpires Display whether passwords never expire (yes/no). -disabled Display whether user accounts are disabled (yes/no). -acctexpires Display the dates when user accounts expire. (date/never) -reversiblepwd Display whether the user passwords may be stored with reversible encryption (yes/no). -memberof Display the immediate list of groups of which the user is a member. -expand Display the recursively expanded list of groups of which the user is a member. -uc Unicode format -uco Unicode format for output only -uci Unicode format for input only -part Connect to the directory partition PartitionDN -qlimit Display the effective quota of the user within PartitionDN -qused Display how much quota the user has used within PartitionDN

DS* commands are available on networked machines with the server role A.D. Domain Services installed, Domain Controllers (or for XP users: XP Professional).

Dsget can accept stdin from the keyboard, from a redirected file, or as piped output from another command e.g. DSQuery


Find the list of groups, recursively expanded, to which the user Fred belongs:

C:\> dsget user "cn=fred,ou=Users,ou=AcmeCo,dc=ss64,dc=com" -memberof -expand

Display the distinguished name and description of domain controller Dom1:

C:\> dsget server CN=Dom1,CN=Servers,CN=AcmeCo,DC=ss64,DC=Com -dn -desc

“There’s no such thing as a free lunch” - Milton Friedman

Related commands:

DSAdd - Add object

DSGet - Display object

DSMod - Modify object

DSMove - Move object

DSQuery - Search for objects

DSRM - Delete object