As I indicated in my previous response. Domain Users is normally a primary group for users. Primary group membership is not stored in the group itself, it is stored on the user objects. 

   joe


--
O'Reilly Active Directory Fifth Edition - http://link.joeware.org/AD5E  
Blog: http://blog.joeware.net



On Mon, May 26, 2014 at 12:41 AM, Sankar P <sankar.curiosity@gmail.com> wrote:
2014-05-02 18:12 GMT+05:30 Jon C Kidder <jckidder@aep.com>:
> http://msdn.microsoft.com/en-us/library/aa367017(v=vs.85).aspx
>

Unfortunately even this does not work with the "Domain Users" group. I
was able to get the members of any custom groups that the
administrator has created but a query on the default "Domain Users"
group returns just null.

> I personally use the LSC project to replicate AD with OpenLDAP and have published a relevant snippet of JavaScript that does this for large user groups.
>
> http://lists.lsc-project.org/pipermail/lsc-users/2013-September/001606.html
>
> -Jon C. Kidder
> American Electric Power
> Middleware Services
> Email: jckidder@aep.com
> Phone: 614-716-4970
>
> -----Original Message-----
> From: Sankar P [mailto:sankar.curiosity@gmail.com]
> Sent: Friday, May 02, 2014 1:09 AM
> To: Jon C Kidder
> Cc: Mark Pröhl; openldap-technical@openldap.org
> Subject: Re: Getting the list of members in an AD group
>
>  This is an EXTERNAL email. STOP. THINK before you CLICK links or OPEN attachments.
>
> **********************************************************************
> 2014-04-11 19:11 GMT+05:30 Jon C Kidder <jckidder@aep.com>:
>> When retrieving large group memberships from AD you must use Microsoft's implementation of ranging.
>
> How do I get the members list via openldap with ranging ? I tried googling this but could not get much information about ranging or getting the "Domain Users" group members ?
>
> Can you point me to some relevant link ?
>
> Thanks.
>
> Sankar