How can I determine my user account's OU in a Windows domain?

Question

Is there any way (short of getting an active directory browser) to view my OU while logged in to the domain?

Are you a domain admin, or have access to the domain admin tools? — Matt Simmons, Jun 09 '09 at 19:44

MathewC · Answer 1 · 2016-08-24T14:29:29.440

57

gpresult /r | find "OU"

will do it.

edited Aug 24 '16 at 14:29

answered Jun 09 '09 at 19:44

MathewC

6,957
9
39
53

1

Is this a windows command? Doesn't seem to work. – Luke Jun 09 '09 at 19:48
/r doesn't work for me, although you do get almost everything otherwise with gpresult. – Matt Hanson Jun 09 '09 at 19:48
When I do it there is a user setting section that shows the OU. – MathewC Jun 09 '09 at 19:53
1

Awesome command that I didn't know about. Thanks! +1 – Matt Simmons Jun 09 '09 at 19:54
/R Displays RSoP summary data. – MathewC Jun 09 '09 at 19:56
Luke, what version of windows? I'm on vista ultimate – MathewC Jun 09 '09 at 19:58
I believe /R appeared in Vista/2008 – squillman Jun 09 '09 at 19:59
Nice, I did not know about that command either. – palehorse Jun 09 '09 at 20:14
Still works in Windows 10 – pharsicle Aug 22 '17 at 01:27
1

Needs to be 'findstr' instead of 'find' – kafka Dec 19 '18 at 16:44

score 35 · Answer 2 · answered Nov 15 '17 at 10:59

35

In Command Prompt,

whoami /fqdn

answered Nov 15 '17 at 10:59

cychoi

580
1
5
12

Works in the event `gpresult` yields `ERROR: Access Denied`. Thanks. – timss Dec 01 '17 at 11:10

squillman · Accepted Answer · 2022-03-16T21:02:16.730

16

UPDATE
You should now use this answer on any kind of modern version of Windows

Here's a quick VBS script you can use to display your account's DistinguishedName attribute which contains the OU that your account is in:

set objSysInfo = CreateObject("ADSystemInfo")
set objUser = GetObject("LDAP://" & objSysInfo.UserName)
wscript.echo "DN: " & objUser.distinguishedName

EDIT: I should say that it will display the DN of the account in which context the script is run...

edited Mar 16 '22 at 21:02

answered Jun 09 '09 at 19:46

squillman

37,883
12
92
146

You beat me to it by about 15 seconds! Zow... – Evan Anderson Jun 09 '09 at 19:48
I beat him but for some reason gpresult /r doesn't work for everyone. "snaps fingers in lost pointage regret" ;-) – MathewC Jun 09 '09 at 19:57
Aye, 'tis true :) +1 though, great command! – squillman Jun 09 '09 at 20:05
3

Not sure why this is the accepted answer when "whoami /fqdn" is far simpler? – RCross Feb 23 '18 at 10:42

score 8 · Answer 4 · edited Aug 13 '13 at 14:51

8

I've found that

gpresult -v|more

also works for this.

edited Aug 13 '13 at 14:51

Flup

7,978
2
32
43

answered Aug 13 '13 at 14:28

JJJJNR

870
6
20
32

score 3 · Answer 5 · answered Apr 09 '19 at 16:25

I am able to run the following in a cmd window

gpresult /r | find "OU"

Example output:

USER SETTINGS
--------------
CN=Lastname\, Firstname,OU=Users,OU=Toronto,DC=site,DC=com

    Last time Group Policy was applied: 1/24/2019 at 4:04:04 PM
    Group Policy was applied from:      dc.site.com
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        SITE
    Domain Type:                        Windows 2008 or later

It also lists the user groups you are a member of:

The user is a part of the following security groups
---------------------------------------------------
    Domain Users
    Everyone
    BUILTIN\Administrators
    BUILTIN\Users
    Performance Log Users
    NT AUTHORITY\INTERACTIVE
    CONSOLE LOGON
    NT AUTHORITY\Authenticated Users
    This Organization
    LOCAL
    custom_security_linux_group

score 2 · Answer 6 · answered Jun 15 '09 at 02:40

2

User: adfind -sc u:%username% dn

Computer: adfind -sc c:%computername% dn

Adfind available at http://www.joeware.net/freetools/tools/adfind/index.htm

answered Jun 15 '09 at 02:40

benPearce

321
5
11

adfind is one of my favorite AD tools. I <3 joeware. – JamesBarnett Dec 28 '10 at 08:54

score 1 · Answer 7 · answered Aug 22 '19 at 22:08

1

At a command / powershell prompt:

dsquery user -name <your-user-name>

answered Aug 22 '19 at 22:08

thetoolman

121
2

How can I determine my user account's OU in a Windows domain?

7 Answers7