Get User Groups and Add Users to Groups

To find the Active Directory (AD) groups that a user is a member of, you can use the Get-ADPrincipalGroupMembership cmdlet in PowerShell.

# Import the ActiveDirectory module  
Import-Module ActiveDirectory  

# Get the AD user object  
$User = Get-ADUser -Identity “John Smith”  

# Get the AD groups that the user is a member of  
Get-ADPrincipalGroupMembership -Identity $User

The Get-ADPrincipalGroupMembership cmdlet returns an array of ADGroup objects representing the AD groups that the user is a member of. You can use the Name property of each ADGroup object to get the name of the group.

You can also use the -Recursive parameter to get the nested membership of the user, which includes the groups that the user is a member of, as well as the groups that those groups are a member of, and so on.

You can find more information about the Get-ADPrincipalGroupMembership cmdlet in the PowerShell documentation.