This command-line tool displays members of global groups on remote servers or domains.
For Microsoft® Windows® 2000 Server, a global group is one that can be granted permissions and rights and can become a member of local groups in its own domain, the member servers and workstations thereof, and trusting domains. However, a global group can contain user accounts only from its own domain. Global groups provide a way to create sets of users from inside the domain, available for use both in and out of the domain.
Global groups cannot be created or maintained on computers running Microsoft® Windows® 2000 Professional. For Windows 2000 Professional computers that participate in a domain, however, domain global groups can be granted rights and permissions at those workstations and can become members of local groups on those workstations.
To manage users and groups on your computer in Windows 2000, use Local Users and Groups, under the System Tools node of the Computer Management MMC snap-in, one of the Administrative Tools.
global groupname {domainname | \\server} [/?]
Where:
Run without parameters, global also displays this syntax screen.
Note
To list members of local groups, use Local.exe, another Resource Kit tool.
global "server operators" nt_domain
displays the members of the group server operators in the nt_domain domain.
global "Domain Users" EastCoast
displays the members of the group Domain Users in the EastCoast domain.
global PrintUsers \\blackcat
displays the members of the group PrintUsers on the server blackcat.
For a group with many users, you can use Global to redirect the member list into a text file, for example:
global Group1 \\Server1 > globallist.txt
Then text files containing membership of different groups can be compared for discrepancies with a program like Windiff, which is included in the Windows 2000 Support Tools.
File Required