search

EvotecIT / ADEssentials

PowerShell Active Directory helper functions to manage healthy Active Directory
MIT License
429 stars 51 forks source link

Display customised levels of descendents #36

Open shisheng10 opened 1 year ago

shisheng10 commented 1 year ago

Is there a way to display only certain levels of descendents of an AD group using Show-WinADGroupMember e.g. immediate descendents or first 2 levels of descendents etc?

We have a use case where we do not need to view all the nested groups but only the first 1 or 2 levels of nested groups.

Thanks.

PrzemyslawKlys commented 1 year ago

At the moment it's only possible to hide all users, all computers so that you can only leave the groups on the display. Maybe it should be possible to display only certain level tho

shisheng10 commented 1 year ago

At the moment it's only possible to hide all users, all computers so that you can only leave the groups on the display. Maybe it should be possible to display only certain level tho

Able to share how to display only the 1st level of an AD group i.e. immediate descendents?

Thanks.

PrzemyslawKlys commented 1 year ago

I didn't say it's possible now, i said maybe it should be. You only can hide users or computers completly.

Show-WinADGroupMember -Identity 'Domain Admins','Enterprise Admins' -HideUsers
shisheng10 commented 1 year ago

Is there a way to filter and only display all the nested AD groups starting with GG-APP-*?

PrzemyslawKlys commented 1 year ago

On the Diagram - no. All good ideas, just not super priority for me ;) But if you want to try and add it - be my guest. The question is - what would happen if you filter it on GG-APP and you have some of those groups on level 1 and some on level 5 and nothing in the middle that connects them with that name?