List of user groups command line

On Windows OS we can find the list of local user groups created on a system from Contorl Panel -> User Accounts. This information can be obtained from command line also using net command. Syntax is shown below.

Example: Running this command shows the following local groups on my system.

How to list the users in a local group?

Use the below command to know the list of members of a group from command line.

For example to get the list of all remote desktop users on a system we can run the below command.

How to find the list of all groups a user is member of?
You can run the below command to list the groups a user is member of. This command prints the details of the given user account. You can find the group membership information in the last two line of this command output.

Useful references, however “net use username” should be changed to “net user username”

Thank you Kennedy. Corrected the command.

Please get me a command which will display all local users as: LOGIN, FULL NAME, DESCRIPTION, GROUP etc..

I’d just like to express my frustration with this API. As you can see in these examples, thet net API localgroups functionality will happily list all members of a group. However the net user code completely ignores system accounts, as does most of the rest of what Windows makes available. Internally they are organized as a subclass of Win32_Account but not Win32_UserAccount. So it’s possible to retrieve a bunch of useless information from the Windows API. This happens with LookupAccountSid as well. If you give it an SID like S-1-5-20, it will give you an answer. But the answer it gives you can’t be used as input for anything else, which is obnoxious.

You can query if users exist by doing

SET /P query_user=What user do i look for?
::Take out /domain if you want to look on the local computer
Net User %query_user% /domain
if NOT %errorlevel% == 0 goto s_error_1
if %errorlevel% == 0 goto s_success_1

“net user /domain username” lists only the groups to which the username is a direct member. It can’t show nested groups. I was doing a quick check to see if a username was a member of a group:

net user /domain username | find “Group Name”

That fails since the user is not directly a member of “Group Name”. In reality, they are a member, as they’re a member of a nested group.

Any idea of a command line that will expand groups to look for a particular member? I’ve used the “dsquery” and “dsget” commands, but they are only present if the AD tools are installed.

Very useful thanks, didn’t worked for me the first time.

The command is not case sensitive.

For example “NET USER /DOMAIN MYDOMAIN/MyUser” Didn’t worked.

But “NET USER /DOMAIN MyUser” works fine!
So not necessary to put explicitly the domain.

By the way it means also you can’t query another domain than the main one you are logged on to ?

Is there any option where we can get the multiple user’s output in excel for local computer and remote computer
net user userName

Как получить в Powershell список групп и их пользователей

Get-ADGroup — это команда, которая возвращает список групп в Powershell. Для того что бы вывести список пользователей в группе есть другая команда Get-ADGroupMember и мы ее тоже рассмотрим. В этих командлетах есть один обязательный ключ. Для примера так мы выведем весь список групп AD в Powershell:

Навигация по посту

Примеры с Get-ADGroup Filter

Если мы хотим вывести, например, только список групп безопасности, то можно сделать это так:

GroupCategory — это свойство, а eq ищет точное соответствие. Операторы сравнения powershell разбирались тут.

Свойств, которые мы бы хотели вывести или сравнить достаточно много и что бы увидеть их все выполните:

Можно делать сравнивание по нескольким значениям. Если я хочу получить группы созданные 20 дней назад, а так же что бы их тип был Distribution (группа распространения), мне следует сделать так:

Другие примеры рассматриваются дальше.

Получаем список пользователей группы в Powershell Get-ADGroup

Мы можем найти данные по группе указав только имя. В моем случае я ищу группу, где имя заканчивается на marketing:

• Properties — расширяет список стандартных свойств. В нашем случае указываем, что нам нужно получить список пользователей группы в Powershell
• Select — в таком варианте команда выводит список всех свойств, а не только стандартный список

У нас есть и другой способ получить список пользователей группы — это через Get-ADGroupMember. Принцип такой же как и в предыдущих вариантах:

Разница этих двух вариантов в том, что в первом случае мы получаем укороченную информацию о пользователях, а во втором более подробный список.

Для получение пользователей можно сделать и так, но в этом варианте есть минус, что мы должны писать точное соответствие имени:

В описании на сайте Microsoft пишут, что в нем появляется ошибка только в случае, если командлет возвращает более одной группы (в случае использования масок), но у меня так и не получилось это сделать. Вместо имени мы можем использовать SID и GUID.

Получение в Powershell групп пользователя

Обратная ситуация, когда мы хотим узнать в каких группах наш пользователь. Для этого тоже есть несколько вариантов. Первый — это через команду получения пользователей со свойством MemberOf:

Если мы хотим узнать какую либо подробную информацию о группе сделайте так:

Мы можем найти группы пользователя и так:

Но минус этого способа в том, что он будет выполняться дольше. Возможно это будет не заметно с 1000 пользователями, а вот с 50000 может.

How to open Local Users and Groups on Windows 10

Apart from what is visible to you on the login screen, Windows 10 tends to create several users and groups in the background to carry out several tasks on a computer. However, they are not visible to a normal user and are logged in in the background and serve a great deal in permission structuring. Let us learn how to see and to manage Local Users and groups on a Windows 10/8/7 on the computer.

Open Local Users and Groups on Windows 10

The following methods will help you to open and view Local Users and Groups on Windows 10:

1. Using the Computer Management utility
2. Directly by using lusrmgr.msc.

Let us look at the procedure in detail. We will also take a look at how to add or remove Users from a Group.

1] Using the Computer Management utility

Open the WinX menu and select Computer Management.

From the left side navigation panel, select Local Users and Groups under the expanded list of Computer Management (Local).

You will see two folders here:

1. Users and
2. Groups.

Expanding each will give you the required details.

2] Directly by using lusrmgr.msc

To open Local Users and Groups window, you have to invoke its process, which is called lusrmgr.msc, and you can do this in the following four ways.

Using the Run box

Hit the Windows Key + R button combination on your keyboard.

Type in lusrmgr.msc and hit Enter.

It will open the Local Users and Groups window.

Using Windows Search box

Hit the Windows Key + S button combination on your keyboard. It will launch the Windows Search Box.

Search for lusrmgr.msc and hit Enter.

The Local Users and Group window will now be open.

Using Windows 10 Command Prompt

Open Windows Command Prompt and execute the following command:

You will arrive at your destination window.

Using Windows PowerShell command line

Open Windows PowerShell and execute the following command:

It will open at your destination window.

Add or remove Users from Group

To add or remove Users from a Group:

1. Open the Groups folder
2. Select the Group
3. Double-click on the group
4. Under the Members box, select the user you want to delete.
5. Click on the Delete button.

To add a User, click the Add button and follow the process.

Add a User to Group using Command Prompt

You need to execute the following command:

Replace GROUP and USER with the actual names.

Remove a User from a Group using Command Prompt

You need to execute the following command:

Replace GROUP and USER with the actual names.

Add a User to Group using PowerShell

You need to execute the following command:

Replace GROUP and USER with the actual names.

Remove a User from a Group using PowerShell

You need to execute the following command:

Replace GROUP and USER with the actual names.

I hope this helps.

Windows 10 Home user? These links may interest you:

1. Use freeware Lusrmgr tool to access Local User and Group Management in Windows 10 Home
2. Open and Manage Local User and Group Management in Windows 10 Home using Command Prompt or PowerShell.

List all user accounts in a Windows Domain group via Command Line?

I would like to find\create a command to list all user accounts with all details on a Windows Domain Controller (Server 2012 R2) from a specified group.

Using «net users» would be perfect, but I have no idea how to do output of this command for all users in one action (i.e. I need to write this command for each user separately if I want to get to know details).

If there is no way to use «Net users» then

would be nice too. But I also need to get information from the specified group (Enterprise Admins, Domain Admins etc.).
I know that I can use PowerShell, but I’m trying to find a solution for CMD .

2 Answers 2

You can just use PowerShell within a batch script to run the needed logic in cmd to get the best of both worlds. I placed a simple example below that you just change the GroupName variable value to be the group which you need to query and it will provide you a list of the members of that group in cmd just as you expect.

Since you said you are running this on a domain controller, just use Get-ADGroupMember and get the task done with simple ease while using cmd as you desire.

Batch Script (members of a group only)

Note: Add the -Recursive switch to get members of other nested group members if applicable.

Output Example

Furthermore, if you need to get more than just the group members of the group you query, you can save that detail to a variable and then pipe that variable array object over to a ForEach-Object loop and then iterate over the Get-ADUser and pull out the specific properties from there as needed.

How do I view all the users on a Windows computer? (5 ways)

Sometimes, you may need to extract a list of all the user accounts on a Windows computer. Or you may want to know the hidden user accounts that exist alongside your user account. To help you out, we compiled a list of five methods that you can use to see all the users, including the hidden ones created by Windows or third-party apps that you installed. Here they are:

Quick Steps:

1. Open CMD or PowerShell.
2. Type net user, and press Enter.
3. Net user lists the users that have accounts configured on a Windows PC, including hidden ones or disabled user accounts.

NOTE: This guide covers Windows 10, Windows 7, and Windows 8.1. If you don’t know the Windows version that you have, read How to tell what Windows I have (11 ways).

1. How to see users using the Windows command line (PowerShell & CMD list users)

This method works both in the Command Prompt and PowerShell. Open the command-line app that you prefer, type net user, and press Enter. Net user lists the users that have accounts configured on a Windows PC, including hidden ones or disabled user accounts. The user accounts are listed by their internal names that Windows uses behind the scenes, not by their full display name that you see when you sign in to Windows.

Run net user to make Windows CMD show users

You can also have the net user list stored in a text file that opens in Notepad or any other text editor. Type net user > filename.txt, and a file with the name you provided is created under “C:\Users\Your User Name.”

Save the net list of users to a file using net user > filename.txt

If you want to export the CMD list of users to a text file that’s saved in a location you choose, enter net user > “path\filename.txt” and press Enter.

Export the CMD list of users to a file at a specified location

A neat trick is using this command to find information about a specific user account: type net user username and press Enter. Windows then displays helpful information about that user account, like when the password was set the last time, when it expires (if it’s set to expire), the groups it’s a part of, and more.

Getting details about a user account in CMD, using the net user command

If you want to know more about this command and all its parameters, go to this documentation page: Net user.

2. How to use PowerShell to get all users on a computer

Besides the net user command, here’s another command that you can use in PowerShell to view all users in Windows 10 or previous versions: Get-WmiObject Win32_UserAccount -filter “LocalAccount=True” | Select-Object Name,FullName,Disabled.

Get-WmiObject Win32_UserAccount -filter “LocalAccount=True” | Select-Object Name,FullName,Disabled

Alternatively, if you use Windows 10, you can also run the simpler get-localuser command, as pointed out by one of our readers.

Using PowerShell to get all users on a computer

3. How to see the list of all user accounts in Computer Management

Another method that displays all user accounts, including hidden users or disabled ones, involves using Computer Management. Open Computer Management, and go to “Local Users and Groups -> Users.” On the right side, you get to see all the user accounts, their names as used by Windows behind the scenes, their full names (or the display names), and, in some cases, also a description.

Windows list of users displayed in Computer Management

Double-click or double-tap on a user account to learn more about its properties and settings, including the user groups that it is part of.

4. How to see the list of active user accounts using the Control Panel

A method that is less geeky but which also displays less information involves opening the Control Panel. After you start it, go to “User accounts” or “User Accounts and Family Safety,” depending on the Windows version that you have.

The User Accounts entry from the Control Panel

Then, click or tap on User accounts.

Opening the User Accounts settings

Now you see your user account, information about it, and several links. Click or tap the link that says “Manage another account.”

Manage another account

Now you see the active, not-hidden user accounts in Windows, whether they are local accounts, administrators, etc.

Control Panel shows the list of users on a Windows computer

With this method, you cannot see hidden or disabled user accounts.

5. How to see the list of active user accounts on the Windows sign-in screen

The obvious and most straightforward method is to look at the sign-in screen just before you log into Windows. You should see all the active (not hidden) user accounts that exist in Windows on this screen. If you are using Windows 10, this list is shown in the bottom-left corner of the sign-in screen.

Windows 10 list of users shown on the sign-in screen

If you are using Windows 7, all active user accounts are displayed front and center.

Windows 7 list of users shown on the sign-in screen

The same is true when using the Windows 8.1 sign-in screen.

Windows 8.1 list of users shown on the sign-in screen

The downside of this method is that you cannot see hidden or disabled user accounts.

Did you find many hidden user accounts on your Windows PC?

We highly recommend trying the first three methods for identifying all the user accounts that exist on your Windows computer or device. You may be surprised to see that some of your apps created hidden user accounts that you had no idea existed. Before closing this tutorial, share in a comment whether you found hidden user accounts on your PC and how many of them were there. We are curious to know.