Image	GUI Field	ADSI Property
	[Group ID] (Read Only)	cn
	Group name (pre-Windows 2000) (Read Only)	name
	Description	description
	E-Mail	mail
	Group Scope: Domain Local (Read Only)	groupType
	Group Scope: Global (Read Only)	groupType
	Group Scope: Universal (Read Only)	groupType
	Group Type: Security (Read Only)	groupType
	Group Type: Distribution (Read Only)	groupType
	Notes	info

Read Script Example

Option Explicit 'Change as required Const strLDAP = "CN=Demo Group,CN=Users" Dim objRootDSE, objItem Dim objHash Dim intgroupType On Error Resume Next '* Set objRootDSE = GetObject("LDAP://rootDSE") Set objHash = CreateObject("Scripting.Dictionary") 'Setup Data Set objItem = GetObject("LDAP://" & strLDAP & "," & objRootDSE.Get("defaultNamingContext")) objHash.Add "ADS_GROUP_TYPE_GLOBAL_GROUP", &h2 objHash.Add "ADS_GROUP_TYPE_DOMAIN_LOCAL_GROUP", &h4 objHash.Add "ADS_GROUP_TYPE_UNIVERSAL_GROUP", &h8 objHash.Add "ADS_GROUP_TYPE_SECURITY_ENABLED", &h80000000 WScript.Echo "GENERAL PROPERTIES PAGE" WScript.Echo String(45, "/") WScript.Echo "(Single Valued Attributes)" WScript.Echo String(45, "-") WScript.Echo WScript.Echo "[Group ID]:...." & objItem.Get("cn") WScript.Echo "Group Name:...." & objItem.Get("name") WScript.Echo "Description:..." & objItem.Get("description") WScript.Echo "E-Mail:........" & objItem.Get("mail") WScript.Echo "Notes:........." & objItem.Get("info") WScript.Echo WScript.Echo "(groupType Value)" WScript.Echo String(45, "-") WScript.Echo WScript.Echo "Group Scope:" intgroupType = objItem.Get("groupType") If intgroupType AND objHash.Item("ADS_GROUP_TYPE_DOMAIN_LOCAL_GROUP") Then WScript.Echo "-> Domain Local Group" ElseIf intGroupType AND objHash.Item("ADS_GROUP_TYPE_GLOBAL_GROUP") Then WScript.Echo "-> Global Group" ElseIf intGroupType AND objHash.Item("ADS_GROUP_TYPE_UNIVERSAL_GROUP") Then WScript.Echo "-> Universal Group" End If WScript.Echo WScript.Echo "Group Type:" If intgroupType AND objHash.Item("ADS_GROUP_TYPE_SECURITY_ENABLED") Then WScript.Echo "-> Security" Else WScript.Echo "-> Distribution" End If Set objHash = Nothing Set objRootDSE = Nothing Set objItem = Nothing '* Values not present in AD are not stored as 'empty strings, but null properties and not returned 'in a query. Accessing a non-present property will 'throw an error.

Write Script Example

Option Explicit 'Change as required Const strLDAP = "CN=Demo Group,CN=Users" Dim objRootDSE, objItem 'On Error Resume Next Set objRootDSE = GetObject("LDAP://rootDSE") 'Setup Data Set objItem = GetObject("LDAP://" & strLDAP & "," & objRootDSE.Get("defaultNamingContext")) WScript.Echo "GENERAL PROPERTIES PAGE" WScript.Echo String(45, "/") WScript.Echo "(Single Valued Attributes)" WScript.Echo String(45, "-") WScript.Echo WScript.Echo "Description:.......Generic Description" objItem.Put "description", "Generic Description" objItem.SetInfo WScript.Echo "E-Mail:............[UserID]@[Host].com" objItem.Put "mail", "[UserID]@[Host].com" objItem.SetInfo WScript.Echo "Notes:.............Updated: " & Now objItem.Put "info", CStr(Now) objItem.SetInfo Set objRootDSE = Nothing Set objItem = Nothing

More Info URLs

• MSDN: Platform SDK: Active Directory Service Interfaces: ADS_GROUP_TYPE_ENUM
• MSDN: Platform SDK: Active Directory Service Interfaces: Group-Type
• MSDN: Platform SDK: Active Directory Service Interfaces: Group