ManageEngine ADManager Plus is a powerful GUI-based tool that lets you
generate AD group membership reports without any scripts

With this AD group membership reporting tool, you can

Gain in-depth visibility on AD groups at a granular level

Manage AD groups right from the reports

Schedule reports to be automatically generated and emailed at specified times

Export AD group membership reports in multiple formats, such as CSV, PDF, XLSX, HTML, and CSVDE

Generate the following member-based AD group reports with the click of a button

  •  

    Group Members report

    Fetches the details of the members of the selected group. It checks the memberOf attribute of all users and fetches all AD attributes of all users belonging to the specified group.

  •  

    Detailed Group Members report

    Drills down from a particular AD security or distribution group to its nested groups, and fetches the group membership recursively.

  •  

    Groups Without Members report

    Identifies groups without any members. You can delete selected groups in bulk from the same window.

  •  

    Users Only Members of Domain Users Group report

    Generates the list of users who are not members of any group other than the domain users group.

  •  

    Users Not in Groups and Computers Not in Groups reports

    Obtains the list of users and computers that are not a member of the specified groups.

Steps to generate this report in ADManager Plus:

  1. 1Log in to the ADManager Plus console and navigate to the Reports tab.
  2. 2Click Group Members listed under Member-based Reports in Group Reports.
  3. 3Select the desired domain and the group name in the respective fields. Use the check box to choose whether you would like to exclude nested groups.
  4. 4Click Generate to view the report.
Group Members Report - Check Active Directory Group Membership 1 2 3 4

Steps to generate this report in ADManager Plus:

  1. 1Log in to the ADManager Plus console and navigate to the Reports tab.
  2. 2Click Detailed Group Members listed under Member-based Reports in Group Reports.
  3. 3Select the desired domain and the group name in the respective fields. Use the check box to choose whether you would like to exclude nested groups.
  4. 4Using the check box, select the type of objects to be listed in the report.
  5. 5For each selected object, choose the category and attributes to be fetched using the Filters and Columns options.
  6. 6Click Generate to view the report.
Detailed Group Members Report - Active Directory list members of a group 1 2 3 4 5 5

Steps to generate this report in ADManager Plus:

  1. 1Log in to the ADManager Plus console and navigate to the Reports tab.
  2. 2Click Groups Without Members listed under Member-based Reports in Group Reports.
  3. 3Select the desired domain and click Generate to view the report.
  4. 4To move or delete groups, select the desired groups using the check boxes on the left side. Once selected, click Move Groups or Delete Groups from Action as required, and click Go to execute the management operation.
Groups without members report - Export ad group members to csv 1 2 3 4

Steps to generate this report in ADManager Plus:

  1. 1Log in to the ADManager Plus console and navigate to the Reports tab.
  2. 2Click Users Only Members of Domain Users Group listed under Member-based Reports in Group Reports.
  3. 3Select the desired domain and click Generate to view the report.
Users only member of domain users group - Export AD security group members to CSV 1 2 3

Steps to generate these reports in ADManager Plus:

  1. 1Log in to the ADManager Plus console and navigate to the Reports tab.
  2. 2Click Users Not in Groups or Computers Not in Groups listed under Member-based Reports in Group Reports.
  3. 3Select the desired domain and the group name in the respective fields.
  4. 4Click Generate to view the report.
Users not in groups and computers - Active Directory export group members 1 2 3 4

9 out of 10 Fortune 100 companies trust
ManageEngine to manage their IT.

 
4.6/5
 
4.1/5
 
4.5/5
 
4.47/5
 
4.6/5
 
4.6/5

Scenario

As part of your organization's routine AD cleanup policy, you are tasked with isolating all the AD groups without any members and deleting them.

Solution

Performing this operation using native AD tools and PowerShell scripts can become complex, especially in environments where users are often moved around across groups. With ADManager Plus, you can generate the Groups Without Members report and delete all the empty groups in just a few clicks.

Start your free trial

Over 280,000 organizations across 190 countries
trust ManageEngine to manage their IT.

AD group membership reporting is just one of the many powerful
features in ADManager Plus

Here are a few more

AD management

Leverage the customizable
templates to manage all AD objects
with simple, GUI-based actions.

AD reporting

Automatically generate detailed
reports on AD, Exchange, Google
Workspace, and more and have them
delivered at the specified time.

AD automation

Automate routine AD tasks like
creating users and deleting inactive
users. Track the status of automated
tasks whenever required.

Microsoft 365 management

Create and manage Microsoft 365
users and their licenses, groups,
contacts, mailboxes, and more.

Start your free trial

Frequently asked questions

Why is the Microsoft 365 last logon report needed?

As a security measure, organizations often need to keep track of the logon activities of Microsoft 365 mailbox users. Aside from security, logon information is collected for various reasons such as adhering to compliance standards, detecting policy violations, and identifying licenses assigned to inactive users so you can reassign them to active users.

What are the AD attributes related to the user logon time?

The attributes related to the user logon time are lastLogon and lastLogonTimeStamp. The former is a non-replicating attribute and is updated only in the domain controller that authenticates the user during logon. The latter is the replicated version and its value gets updated whenever the difference between the previous timestamp and the current timestamp exceeds a certain threshold value.
ADManager Plus retrieves the lastLogon value from all DCs and the latest values will be updated for the lastLogon and lastLogonTimeStamp fields.

What are the limitations of generating this report with native AD tools and scripts?

With the Microsoft 365 Admin Center, you can only view the most recent logon information of users individually. If admins wish to obtain the last logon time of multiple Microsoft 365 mailbox users at once, the only alternative is using complex PowerShell scripts. Furthermore, with PowerShell, only limited filtering options are available, which makes it difficult to narrow down and find any suspicious logon activities.

How does ADManager Plus simplify Microsoft 365 last logon reporting?

ADManager Plus provides detailed M365 user logon information such as last logon times, last logoff times, details of M365 licenses, and more without using any scripts. Besides listing logon information about users with specific licenses, it displays the AD attributes of users such as logon time, account status, and more.

Over 100,000 technicians
trust ADManager Plus to manage their
Windows environment.

  • ADManager Plus provides us a single point for our Active Directory Reports. For a small IT department this is crucial for saving time and being able to apply our energy to keeping things running smooth. I foresee this being in our arsenal of network tools for a long time to come.

    Mark Anderson

    IT Support, ET Investments

  • ADManager Plus - The Swiss Army Knife for AD Administrator
    It has made managing and administrating Active Directory easy, fast and efficient. Everyday tasks which earlier required us to write Powershell scripts are now easily achievable using an workflow like interface.

    Deputy Chief IT Engineer

    Company Size: 1B - 3B, Energy and Utilities

  1. 1
  2. 2

Unified Active Directory, Exchange, and Microsoft 365
management and reporting solution.

Try ADManager Plus today! 30-day, free trial. No credit card required. No strings attached.

© 2025, Zoho Corporation Pvt. Ltd. All Rights Reserved.

×

Thanks!

Your download is in progress and it will be completed in just a few seconds! If you face any issues, download manually here

×

Start your 30-day free trial

  •  
  • *
     
  •  
  •  
  • By clicking 'Submit' you agree to processing of personal data according to the Privacy Policy.
×
Back to Top