As I indicated in my previous response. Domain Users is normally a primary group for users. Primary group membership is not stored in the group itself, it is stored on the user objects.
joe
-- O'Reilly Active Directory Fifth Edition - http://link.joeware.org/AD5E Blog: http://blog.joeware.net
On Mon, May 26, 2014 at 12:41 AM, Sankar P sankar.curiosity@gmail.com wrote:
2014-05-02 18:12 GMT+05:30 Jon C Kidder jckidder@aep.com:
http://msdn.microsoft.com/en-us/library/aa367017(v=vs.85).aspx
Unfortunately even this does not work with the "Domain Users" group. I was able to get the members of any custom groups that the administrator has created but a query on the default "Domain Users" group returns just null.
I personally use the LSC project to replicate AD with OpenLDAP and have
published a relevant snippet of JavaScript that does this for large user groups.
http://lists.lsc-project.org/pipermail/lsc-users/2013-September/001606.html
-Jon C. Kidder American Electric Power Middleware Services Email: jckidder@aep.com Phone: 614-716-4970
-----Original Message----- From: Sankar P [mailto:sankar.curiosity@gmail.com] Sent: Friday, May 02, 2014 1:09 AM To: Jon C Kidder Cc: Mark Pröhl; openldap-technical@openldap.org Subject: Re: Getting the list of members in an AD group
This is an EXTERNAL email. STOP. THINK before you CLICK links or OPEN
attachments.
2014-04-11 19:11 GMT+05:30 Jon C Kidder jckidder@aep.com:
When retrieving large group memberships from AD you must use
Microsoft's implementation of ranging.
How do I get the members list via openldap with ranging ? I tried
googling this but could not get much information about ranging or getting the "Domain Users" group members ?
Can you point me to some relevant link ?
Thanks.
Sankar
-- Sankar P http://psankar.blogspot.com