adsi - retrieving group members/membership from active directory when members attrib doesn't work -


i trying group members "domain users". when using ad users mmc tab, lot of results. when using adsi - not. following doesn't work expected:

  • looking @ members attribute of group entry via ldap/adsi. returns 56 members when there considerably more.
  • searching memberof (returns few entries)
  • searching primarygroup (it not primary group)
  • searching tokengrops (it constructed attribute)

any ideas appreciated.

(i read more , saw mentioend it's not primary group...but i'm suspicious answer anyway :))

there mechanism user can member of group, , it's controlled primarygroupid attribute of user in group.

if primarygroupid of user set rid of group, user functionally in group, though don't show in member attribute of group. tools aduc wise enough this. when step bit lower in stack , hit directory on ldap, smart enough go hunting it.

you can either searches or use constructed attributes in directory take in account.


Comments

Popular posts from this blog

c# - SVN Error : "svnadmin: E205000: Too many arguments" -

c# - Copy ObservableCollection to another ObservableCollection -

All overlapping substrings matching a java regex -