Can anyone tell me how I can list all empty AD groups? I've tried several 
variations on:
get-adgroup -filter * -properties canonicalname,cn,members | where 
{$_.members -eq "{}"} | fl

with no success.

Thanks
-- 
Mark Salter
National Museum of Wales

Salty wrote:
> Can anyone tell me how I can list all empty AD groups? I've tried several 
> variations on:
> get-adgroup -filter * -properties canonicalname,cn,members | where 
> {$_.members -eq "{}"} | fl
> 
> with no success.
> 
> Thanks

It should work with this:

Get-ADGroup -LdapFilter "(!(memberOf=*))" -Properties CanonicalName, CN, 
memberOf

But I can't actually get it to pay attention to that filter which is 
frustrating to say the least.

This should do it as a work-around:

Get-ADGroup -Filter * -Properties canonicalname, cn, members | ?{ 
$_.Members.Count -eq 0 } | FL

HTH

Chris

Nice job. Thanks
-- 
Mark Salter


"Chris Dent" wrote:

> Salty wrote:
> > Can anyone tell me how I can list all empty AD groups? I've tried several 
> > variations on:
> > get-adgroup -filter * -properties canonicalname,cn,members | where 
> > {$_.members -eq "{}"} | fl
> > 
> > with no success.
> > 
> > Thanks
> 
> It should work with this:
> 
> Get-ADGroup -LdapFilter "(!(memberOf=*))" -Properties CanonicalName, CN, 
> memberOf
> 
> But I can't actually get it to pay attention to that filter which is 
> frustrating to say the least.
> 
> This should do it as a work-around:
> 
> Get-ADGroup -Filter * -Properties canonicalname, cn, members | ?{ 
> $_.Members.Count -eq 0 } | FL
> 
> HTH
> 
> Chris
> .
> 

Hi Salty,

Use the -Empty parameter:

Get-QADGroup -SizeLimit 0 -Empty 


---
Shay Levy
Windows PowerShell MVP
http://blogs.microsoft.co.il/blogs/ScriptFanatic
PowerShell Toolbar: http://tinyurl.com/PSToolbar



S> Can anyone tell me how I can list all empty AD groups? I've tried
S> several
S> variations on:
S> get-adgroup -filter * -properties canonicalname,cn,members | where
S> {$_.members -eq "{}"} | fl
S> with no success.
S> 
S> Thanks
S> 

Shay Levy [MVP] wrote:
> Hi Salty,
> 
> Use the -Empty parameter:
> 
> Get-QADGroup -SizeLimit 0 -Empty
> 
> ---
> Shay Levy
> Windows PowerShell MVP
> http://blogs.microsoft.co.il/blogs/ScriptFanatic
> PowerShell Toolbar: http://tinyurl.com/PSToolbar
> 
> 
> 
> S> Can anyone tell me how I can list all empty AD groups? I've tried
> S> several
> S> variations on:
> S> get-adgroup -filter * -properties canonicalname,cn,members | where
> S> {$_.members -eq "{}"} | fl
> S> with no success.
> S> S> Thanks
> S>
> 

Get-ADGroup instead of Get-QADGroup, just to make things complicated :)

Chris