I'm tying to understand the output differences between the following commands:
- PowerShell: Get-ADPrincipalGroupMembership user | format-table -property name
- Windows 10 command prompt: gpresult /R
gpresult /R produces many more records than Get-ADPrincipalGroupMembership. I assume these are "Distribution Groups". However, gpresult /R doesn't seem to pick up some domain specific groups (e.g. Everyone, Remote Desktop Users, etc.) as well as other security groups picked up by Get-ADPrincipalGroupMembership.
I need a command that will, for a given user, provide a complete list of all security groups, distribution groups, and domain-specific groups.
Suggestions?