Leandro, Bom dia.
Teste este script, ele vai listar todos os grupos do AD e seus respectivos membros(um abaixo do outro) com Nome e SAN, so altere a linha MY_DOMAIN com seu dominio e pronto, o objeto que recupera o SAN dos usuarios é o objMember.sAMAccountName.
On Error Resume Next
Set objFSO = CreateObject("Scripting.FileSystemObject")
Set objtextfile = objFSO.deleteFile("GruposAd.CSV")
Set objtextfile = objFSO.CreateTextFile("GruposAd.CSV", Forwritting)
Const ADS_SCOPE_SUBTREE = 8
Const MY_DOMAIN = "DC=DOMINIO,DC=COM"
Const ADS_GROUP_TYPE_GLOBAL_GROUP = &h2
Const ADS_GROUP_TYPE_LOCAL_GROUP = &h4
Const ADS_GROUP_TYPE_UNIVERSAL_GROUP = &h8
Const ADS_GROUP_TYPE_SECURITY_ENABLED = &h80000000
Const E_ADS_PROPERTY_NOT_FOUND = &h8000500D
' Get a recordset of groups in AD
Set objConnection = CreateObject("ADODB.Connection")
Set objCommand = CreateObject("ADODB.Command")
objConnection.Provider = "ADsDSOObject"
objConnection.Open "Active Directory Provider"
Set objCommand.ActiveConnection = objConnection
objCommand.Properties("Page Size") = 10000
objCommand.Properties("Searchscope") = ADS_SCOPE_SUBTREE
objCommand.CommandText = _
"SELECT ADsPath, Name FROM 'LDAP://" & MY_DOMAIN & "' WHERE objectCategory='group'"
Set objRecordSet = objCommand.Execute
objRecordSet.MoveFirst
' For each Group, Get group properties
Do Until objRecordSet.EOF
Set objGroup = GetObject(objRecordSet.Fields("ADsPath").Value)
strGroupName = objRecordSet.Fields("Name").Value
If objGroup.GroupType AND ADS_GROUP_TYPE_LOCAL_GROUP Then
strGroupDesc = "Domain local "
ElseIf objGroup.GroupType AND ADS_GROUP_TYPE_GLOBAL_GROUP Then
strGroupDesc = "Global "
ElseIf objGroup.GroupType AND ADS_GROUP_TYPE_UNIVERSAL_GROUP Then
strGroupDesc = "Universal "
Else
strGroupDesc = "Unknown "
End If
If objGroup.GroupType AND ADS_GROUP_TYPE_SECURITY_ENABLED Then
TipoGrupo = "Security group"
Else
tipoGrupo = "Distribution group"
End If
' Check if there are members
err.clear
arrMemberOf = objGroup.GetEx("Member")
If Err.Number = E_ADS_PROPERTY_NOT_FOUND then
' Write a line to the outputfile with group properties and no members
objtextfile.WriteLine(strGroupName & ";" & strGroupDesc & ";" & "<null>" & ";" & "<null>")
Else
' For each group member, get member properties
For Each strMemberOf in arrMemberOf
Set objMember = GetObject("LDAP://" & strMemberOf)
strMemberName = right(objMember.Name,len(objMember.Name)-3)
' Write a line to the outputfile with group and member properties
objtextfile.WriteLine(strGroupName & ";" & strGroupDesc & ";" & tipoGrupo & ";" & strMemberName & ";" & objMember.sAMAccountName)
set objMember = nothing
Next
End If
objRecordSet.MoveNext
Set objGroup = nothing
Loop
objtextfile.close
wscript.echo "Done!"
