Question : Compare user security groups - Active Directory

Is there a script or program that can compare the groups two different Active Directory users are members of, and show/report the differences?

Answer : Compare user security groups - Active Directory

The attached code will do what you want, but you have to figure out how to read it
Output will look like this:

InputObject                             SideIndicator
-----------                             -------------
CN=Domain Users,CN=Users,DC=Student,... ==
CN=Domain Admins,CN=Users,DC=Student... =>
CN=Administrators,CN=Builtin,DC=Stud... <=
CN=Users,CN=Builtin,DC=Student,DC=Pi... <=
CN=KLAdmins,CN=Users,DC=Student,DC=P... <=

== means both users are members of that group
=> means the second user input is a member of that group and the first user isn't
<= means the first user is a member of that group, and the second user isn't.

1: 2: 3: 4: 5:

$user1 = Read-host "Enter first user name" $user2 = Read-host "Enter second user name" $membership1 = get-adprincipalgroupmembership $user1 $membership2 = get-adprincipalgroupmembership $user2 compare-object $membership1 $membership2 -includeequal