For some reason no one has ever trusted me enough to let me help administer the active directory groups. This means I’m always adding database perms to groups somewhat blindly, hoping the group names are intuitive enough that I can deduce who’s in them. Enter the magic of the command line! Turns out you can view the members of an AD group with a quick trip to the command prompt. Witness: 1. Go to the command prompt. 2. Type:
net group /domain TheGroupName
3. Hit Enter. The image below shows how to find the members of a group called “reportwriters”. That’s it. Now you can go back to wondering why they trust you with all their data but not with their Active Directory 🙂