I have been tasked with some authentication/access items and know there is an easy way to do this within AD but don't know where to start.  What I have set up is a OU called Test Users within an OU called Sales within our main domain.  Within the OU=Test Users there are several security groups having as many as 100 or as little as one person in them.  The goup names are Manager, Regional Mgr, Sales Reps.  A Sales Rep can have a Regional Mgr and a Regional Mgr has a Manager.  There are some cases where a Sales Rep does not have a Regional Mgr and then is associated back to a Manager.  I have utilized the fields within AD to relate a user to a manager and can draw the information out of an LDAP query within SQL but want to utilize the parent/child relationship.  In fact if this could be set up with a function or stored procedure within SQL this would be even better.  Is there a specific command, tool, script I could use to say "this Manager has these Regional Mgr's and these Sales Reps associated with them"?  Or would I go the other way around saying this Sales Rep/Regional Mgr has this Manager associated with them? 

Thanks for the help!

• domain
• Sales Reps
• Test Users
• Manager
• Regional Mgr
• Sales Rep