What it works with
Module: ActiveDirectory
Context: Windows PowerShell 5.1 · Active Directory
Compatibility: Windows PowerShell 5.1 with the ActiveDirectory module is the supported target for this template.
POWERSHELL / LOCAL
FreeIntermediateRead-onlylow
Export privileged AD group membership
Exports direct and recursive leaf membership for well-known privileged Active Directory groups using SID-based discovery so localized group names do not break the inventory.
Generated locally in your browser · Review before running · No tenant access
What this PowerShell script does
Exports direct and recursive leaf membership for well-known privileged Active Directory groups using SID-based discovery so localized group names do not break the inventory.
Requirements
- CSV output path - Use a new absolute Windows CSV path, for example C:\Temp\opselith-report.csv.
Environment
- Module: ActiveDirectory
- Permissions: Read access to Active Directory groups and membership.
- Output: CSV report
- Context: Windows PowerShell 5.1 · Active Directory
- Risk: Low
Review before you run The template is read-only, but you should still review its scopes, target environment and output before execution.
OPS / WORKSPACE
Ready to generate
Configure Export privileged AD group membership in the Builder, review the generated PowerShell and run it in your own environment.
Why use this template?
Exports direct and recursive leaf membership for well-known privileged Active Directory groups using SID-based discovery so localized group names do not break the inventory. It is designed as a focused inventory step that you can review and retain locally.
The template uses ActiveDirectory and requires Read access to Active Directory groups and membership.. Output: CSV report.
Review before running
Read the generated script before execution. Read-only describes the intended Opselith template behavior; your surrounding commands, environment and permissions remain your responsibility.
This Free template is generated locally in your browser.
Generate the script
- Open the template in the PowerShell Builder.
- Enter the requested values and review modules, permissions, output and risk.
- Generate, inspect and save the script before running it in your own administration environment.
OPS / SCRIPT DETAILS
Script details
Exports direct and recursive leaf membership for well-known privileged Active Directory groups using SID-based discovery so localized group names do not break the inventory. Review these details before generating or running the script.
Permissions and impact
Permissions: Directory read access
Risk: Low
Execution impact: Read-only. The script reads configuration or inventory data and does not intentionally create, update or remove objects.
Parameters
- CSV output path - Use a new absolute Windows CSV path, for example C:\Temp\opselith-report.csv.
Output
Output: CSV report generated locally by the script.
This template is available in the free library and is generated locally in your browser.
Example use
Exports direct and recursive leaf membership for well-known privileged Active Directory groups using SID-based discovery so localized group names do not break the inventory.
Enter the required values in the Builder, review the generated script and confirm the output before running it.
Before you run: Confirm the required Read access to Active Directory groups and membership.. Review the generated script and output path, then run it from the documented administrator PowerShell environment.
ValidationRecorded evidenceQA reviewed
Static QAPassed
PSScriptAnalyzerPending
Runtime testedNot yet recorded
Last validatedNot yet recorded
Runtime and community evidence change only after an external tester result is reviewed and accepted for release evidence.
Tester: report a result →TRUST / EVIDENCERecorded trust facts
Last reviewed: 27 Aug 2026
Analyzer evidence: Awaiting a release PSScriptAnalyzer gate that includes this script. No analyzer pass is claimed yet.
Pending and Not yet recorded are evidence states, not failures. Analyzer status does not imply runtime validation.
Was this useful?One click. No email.