Using the Active Directory command-line tools, I have scripted NoMembers.bat to display the distinguished name of all domain groups that have no members.
The syntax for using NoMembers.bat is:
for /f "Tokens=*" %%a in ('dsquery group') do (
call :quiet %%a >nul 2>&1
if "!mbr!" EQU "N" @echo %%a
for /f "Tokens=*" %%m in ('dsget group %1 -members') do (
FortyPoundHead has posted a total of 1975 articles.
You can find more information from FortyPoundHead by visiting .
No comments on this post yet!
Do you have a thought relating to this post? You can post your comment here. If you have an unrelated question, you can use the Q&A section to ask it.
Or you can drop a note to the administrators if you're not sure where you should post.