import-module activedirectory foreach ($u in Get-ADGroupMember -Identity "Users") { if(-not (Get-ADPrincipalGroupMembership $u| ?{$_.Name -eq "Domain Users"})){write-host $u " is missing from Domain Users"} }