Issue
How to view the members of an Active Directory group if you aren't a domain admin and cannot log into to a domain controller.
Product
Power Monitoring Expert 8.x
Power Monitoring Expert 9.0
Power Monitoring Expert 2020
Power Monitoring Expert 2021
Power Monitoring Expert 2022
Power Monitoring Expert 2023
Environment
Windows Active Directory
Cause
While troubleshooting a suspected permission or configuration issue, it may be necessary to view and verify the members of a Windows Active Directory group
in order to determine that a particular user has been granted the correct access rights.
Resolution
From a computer that is a member of the domain, open a command-prompt and run the following command replacing <group name> with the
name of the group you are interested in.NET GROUP "<group name>" /DOMAIN
Unless the permissions on the group object have been changed from the default security settings and set to restrict from viewing, the group memberships are visible using this method.
You will not be permitted to change any group membership settings.