single line LDAP query that enumerates users from a group within a supergroup

Question

I have a scheme that looks like this:

1. Users exist like UserA, UserB, UserC.
2. Groups exist like OverGroup, SubGroup.
3. OverGroup automaticall

Answer 1

Active Directory has a special search filter option that allows it to filter through chained objects, like nested groups. The capability is described here.

Here is an example of how to retrieve all users in a group, including nested groups:

(&(objectClass=user)(memberof:1.2.840.113556.1.4.1941:={0}))

where {0} is the DN of the parent group.

Answer 2

(&(objectClass=user)(memberof:1.2.840.113556.1.4.1941:=CN=MPV_BedPlacement,OU=Security Groups,OU=Groups,OU=CCHCS,DC=CCHCS,DC=LDAP))

You have to add the full DN for the group and no curly braces.