Segue o script, lembrando de alterar o parametro referente ao seu dominio (LDAP://dc=dominio,dc=com')
' Para identificar que tipo de grupo, temos que verificar o valor da propriedade group type
'2 -> Global distribution group
'4 -> Domain local distribution group
'8 -> Universal distribution group
'-2147483646 -> Global security group
'-2147483644 -> Domain local security group
'-2147483640 -> Universal security group
' Portanto, para grupos de segurança, valor menor que zero e de distribuição maior que zero
Const FOR_READING = 1
Const FOR_WRITING = 2
On Error Resume Next
Const ADS_SCOPE_SUBTREE = 2
Set objConnection = CreateObject("ADODB.Connection")
Set objCommand = CreateObject("ADODB.Command")
objConnection.Provider = "ADsDSOObject"
objConnection.Open "Active Directory Provider"
Set objCommand.ActiveConnection = objConnection
objCommand.Properties("Page Size") = 1000
objCommand.Properties("Searchscope") = ADS_SCOPE_SUBTREE
objCommand.CommandText = _
"SELECT cn FROM 'LDAP://dc=dominio,dc=com' WHERE " _
& "objectCategory='group' AND " _
& "groupType > 0 "
Set objFS = CreateObject("Scripting.FileSystemObject")
Set objTS = objFS.CreateTextFile("grupos.txt", FOR_WRITING)
Set objRecordSet = objCommand.Execute
objRecordSet.MoveFirst
Do Until objRecordSet.EOF
objTS.WriteLine objRecordSet.Fields("cn").Value
objRecordSet.MoveNext
Loop
objTS.Close
