Enumeracion de Grupos

Powerview:

# Get all the groups in the current domain
Get-NetGroup
Get-NetGroup -Domain <targetdomain>
Get-NetGroup -FullData
# Get all groups containing the word "admin" in group name
Get-NetGroup *admin*
# Get all the members of the Domain Admins group
Get-NetGroupMember -GroupName "Domain Admins" -Recurse
# Get the group membership for a user:
Get-NetGroup -UserName "student1"
# List all the local groups on a machine (needs administrator privs on non-dc machines) :
Get-NetLocalGroup -ComputerName dcorp-dc.dollarcorp.moneycorp.local -ListGroups
# Get members of all the local groups on a machine (needs administrator privs on non-dc machines)
Get-NetLocalGroup -ComputerName dcorp-dc.dollarcorp.moneycorp.local -Recurse

Filtrar por grupo:

RSAT

# Get all the groups in the current domain
Get-ADGroup -Filter * | select Name
Get-ADGroup -Filter * -Properties *
# Get all groups containing the word "admin" in group name
Get-ADGroup -Filter 'Name -like "*admin*"' | select Name
# Get all the members of the Domain Admins group
Get-ADGroupMember -Identity "Domain Admins" -Recursive
# Get the group membership for a user:
Get-ADPrincipalGroupMembership -Identity student1