COMMAND EVERYTHING.
Locate security groups when reviewing directory-based authorization.
Active Directory · Risk: Low · Documentation VerifiedLast verified: 2026-10-26
Returns security group objects. Membership and resource access require separate inspection.
Get-ADGroup [-AuthType <ADAuthType>] [-Credential <PSCredential>] -Filter <String> [-Properties <String[]>]
[-ResultPageSize <Int32>] [-ResultSetSize <Int32>] [-SearchBase <String>] [-SearchScope <ADSearchScope>]
[-Server <String>] [-ShowMemberTimeToLive] [<CommonParameters>]Directory read access appropriate to the requested objects is required. Replication diagnostics may require additional delegated directory permissions; use an approved administrative account where necessary.
Windows / ActiveDirectory module · Windows Server 2025 PowerShell reference; RSAT module and domain capabilities determine availability
-Filter (required)Windows with the ActiveDirectory PowerShell module (RSAT), connectivity to an appropriate directory server, and an authenticated directory context. Replace example identities and hosts with authorized targets.
Read-only example. Directory identities, group membership, policies, and topology can expose sensitive organizational information. Store and share results only with authorized recipients.
Get-ADGroup -Filter 'GroupCategory -eq "Security"'Returns security group objects. Membership and resource access require separate inspection.
https://learn.microsoft.com/powershell/module/activedirectory/get-adgroup?view=windowsserver2025-ps
Sign in to keep your own command reference lists.
Explain or customize this command with AI