Your network contains an Active Directory domain named contoso.com. The domain contains
hundreds of groups, many of which are nested in other groups.
The domain contains a user account named user1.User1 is a direct member of 15 groups.
You need to identify of which Active Directory groups User1 is a member, including the nested
groups. The solution must minimize administrative effort.
Which tool should you use?
A.
Active Directory Users and Computers
B.
ADSI Edit
C.
Get-ADUser
D.
Dsget
Explanation:
http://technet.microsoft.com/en-us/library/cc732535.aspx
Correct answers is: D (minimize administrative effort)
dsget user “CN=alpha beta,CN=users,dc=domain,dc=tld” -memberof -expand
But also Get-ADUser do the jobs, but needs more parameters.
Displays the properties of a user in the directory. There are two variations of this command. The first variation displays the properties of multiple users. The second variation displays the group membership information of a single user.
dsget user [-memberof] [-expand][{-uc | -uco | -uci}]
In this command -expand takes care of the requested nested group membership.
AD Users and Computers only displays direct group membership