- Open the Powershell ISE on your domain controller → run the following Powershell script (if you need to generate a report on a specific AD group, change the $nameofgroup parameter):
$nameofgroup= 'Domain Admins'
$groupsusers=Get-ADGroup -Identity $nameofgroup |
ForEach-Object{
$settings=@{Group=$_.DistinguishedName;Member=$null}
$_ | Get-ADGroupMember |
ForEach-Object{
$settings.Member=$_.DistinguishedName
New-Object PsObject -Property $settings
}
}
$groupsusers | Export-Csv C:\scripts\GroupsUsers.csv –NoTypeInformation

- Run Netwrix Auditor → Navigate to “Reports” → Expand the “Active Directory” section → Go to “Active Directory – State-in-Time” → Select “Group Members” → Click “View”.
If you want to generate the report on a specific AD group, change the Group Path parameter.
