Any way to list the groups I am a member of in Active Directory?

Factual Questions
1

Hello,

I’m just a regular domain user (local administrator) on an AD network. Is there any way for me to see which AD groups my user belongs to without being an administrator? Anybody know?
Thank you very much,

Best regards,

Groman

2

net user username /domain

note that “domain” is the actual word you have to type. Do not qualify your username with the domain, and do not put your domain name in the spot where I placed “domain”

for example, I would type “net user crazyjoe /domain”

at the command prompt.

3

Thank you very much, that worked beautifully!

4

Depending on the complexity of your environment, that command (net user *username */domain) can leave out a lot of info. The /domain option was created for Win NT & the original release of AD back in 1997. It hasn’t really been updated since.

That command doesn’t know about universal domain groups, nor about any other forest or trusted domain’s global or local groups. So it won’t show your membership in any of those those. It also doesn’t walk indirect (nested) group memberships. Lastly, it truncates long group names, which can result in an ambiguous display.

But if those aren’t issues in your environment, it gives a good answer & is easy to use.

5

I like the “Net user” command idea, but I came into suggest installing the Windows 2003 Resource Kit tools, then you have the “showgrps” command available.

enter “showgrps domain\username” in a command line. Substitute in your actual domain name for “domain” in the example…

I use this all the time to verify group memberships, and solve access issues to the file shares at work.