powershell script för att lista Adgroupmembers och nedärvning snyggt radat

$groupMembers = Get-ADGroupMember "domain admins" -Recursive

$output = @()

foreach ($member in $groupMembers) {
    if ($member.objectClass -eq "user") {
        $user = Get-ADUser $member.SamAccountName -Properties DisplayName
        $outputLine = [PSCustomObject]@{
            Type         = "User"
            Name         = $user.DisplayName
            SamAccountName = $user.SamAccountName
            GroupName    = "domain admins"
        }
    }
    elseif ($member.objectClass -eq "group") {
        $subGroup = Get-ADGroup $member.SamAccountName
        $subGroupMembers = Get-ADGroupMember $subGroup -Recursive | Where-Object { $_.objectClass -eq "user" }

        $outputLine = [PSCustomObject]@{
            Type         = "Group"
            Name         = $subGroup.Name
            SamAccountName = $subGroup.SamAccountName
            GroupName    = "domain admins"
            Members      = $subGroupMembers | ForEach-Object { $_.SamAccountName }
        }
    }
    $output += $outputLine
}

$output | Export-Csv -Path "c:\temp\domain_hierarchy.csv" -NoTypeInformation