How to tell different types of Logins apart and how to see the users? I have a novice question: I could see different (presumably) AD Groups and AD accounts under the SQL Server Server Logins. However, I am unable to tell whether some of these users are AD users vs AD Groups. Someone mentioned you could look at the LOGO and if it's a multiple person it's a group, single person is a user. Is this the best way to tell? That doesn't seem reliable.



Also, how can I see the USERS within an AD group? I can see the group, but I need to see the users. I do NOT have access to the AD Server.

Thank you so much.
Yes the icon changes if it's a group vs a user. You can also query sys.server_principals.

To see the users within an AD group, you can use xp_logininfo. As long as the AD group is a login on the SQL Server, you can query it using xp_logininfo. Here's a really old blog post I wrote on it.

Syntax:

xp_logininfo [ [ @acctname = ] 'account_name' ] 
     [ , [ @option = ] 'all' | 'members' ] 
     [ , [ @privilege = ] variable_name OUTPUT]


Example:

EXEC master.dbo.xp_logininfo 'DomainName\GroupName', 'members'