Output all members, including nested groups, of an AD group. Run from the command line or powershell on a domain controller. dsquery group -name "Group Account Name" | dsget group -members -expand
A longer term project of mine has been the installation and maintenance of our company subversion and Trac server. The main thing I wanted to implement was authentication against our current AD infrastructure and in doing so, allow our Service Desk to give access to repositories through group membership.