12

How do I search Active Directory for objects by GUID? In other words, what would be a good way to find what objects belong to specified GUIDs?

Kyle Brandt
  • 82,107
  • 71
  • 302
  • 444

3 Answers3

18

Either on a DC or install RSAT and enable AD Tools:

Open "Active Director Module for Windows PowerShell" (find it in with the other Admin tools)

get-aduser -id {guid}

Or for any object:

get-adobject -id {guid}

Might want to pipe it through a format-list to make it readable:

get-adobject -id {guid} | fl
Chris S
  • 77,337
  • 11
  • 120
  • 212
  • 2
    +1, simplest answer with native tools. If you're at a regular powershell prompt and don't want to open the AD Module for PS in the start menu you can just run `import-module ActiveDirectory` and all of the same cmdlets will be available in your powershell session. – MDMarra Sep 12 '11 at 17:57
3

Using Powershell and the QuestAD cmdlets, the following code returns my user account based on my guid.

$Guid = "d65e4578-475a-422e-ac99-123456789012"

Get-QADUser -IncludeAllProperties|Where {$_.guid -eq $Guid}

Not the most efficient manner since it loads all objects from AD while doing the search, but it worked for me.

Christopher
  • 1,673
  • 12
  • 17
1
$guid = "d65e4578-475a-422e-ac99-123456789012"

foreach ($dom in (Get-adforest).Domains) { Get-ADObject -filter {ObjectGUID -eq $guid } -Properties * -Server $dom | fl }
Flup
  • 7,688
  • 1
  • 31
  • 43
cblack
  • 11
  • 1