Custom Inventory Rule to list Active Directory Groups that computers are members of.

I am looking to have a custom inventory rule that will list all the Active Directory Groups that the computers are members of.  I have the AD Distinguished Name rule, but don't know how to get the groups.  Thanks for any help!!!

0 Comments   [ + ] Show comments

Answers (3)

Answer Summary:
Posted by: SMal.tmcc 4 years ago
Red Belt
I answered one just like this a few months ago but cannot find it

CIR's run as system so you cannot get user data.

If all you need is the machine groups use
ShellCommandTextReturn(cmd /c gpresult /r /scope:computer)
If you need user data also you will need to create a kscript that runs a current user and echo the results to a file and then a cir to read that file.

If you need this let me know still have the script I made for the last question I answered

  • The output is perfect when I run gpresult /r /scope /computer
    from my command prompt as administrator. But when I use
    ShellCommandTextReturn(cmd /c gpresult /r /scope:computer)
    in KACE, I still get the same output.
    INFO: The user "CULPEPERCOUNTY\IT2244$" does not have RSOP data.

    Thanks again for all your help! - County of Culpeper 4 years ago
  • Thank you so much! It worked perfectly for me as well!!! - County of Culpeper 4 years ago
    • I must be missing something as I get a similar result of "user ""does not have rsop data" am i doing something wrong or am I missing something? Thanks - fng07 3 years ago

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login


This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ