As I indicated in my previous response. Domain Users is normally a primary group for users. Primary group membership is not stored in the group itself, it is stored on the user objects. 


O'Reilly Active Directory Fifth Edition -  

On Mon, May 26, 2014 at 12:41 AM, Sankar P <> wrote:
2014-05-02 18:12 GMT+05:30 Jon C Kidder <>:

Unfortunately even this does not work with the "Domain Users" group. I
was able to get the members of any custom groups that the
administrator has created but a query on the default "Domain Users"
group returns just null.

> I personally use the LSC project to replicate AD with OpenLDAP and have published a relevant snippet of JavaScript that does this for large user groups.
> -Jon C. Kidder
> American Electric Power
> Middleware Services
> Email:
> Phone: 614-716-4970
> -----Original Message-----
> From: Sankar P []
> Sent: Friday, May 02, 2014 1:09 AM
> To: Jon C Kidder
> Cc: Mark Pröhl;
> Subject: Re: Getting the list of members in an AD group
>  This is an EXTERNAL email. STOP. THINK before you CLICK links or OPEN attachments.
> **********************************************************************
> 2014-04-11 19:11 GMT+05:30 Jon C Kidder <>:
>> When retrieving large group memberships from AD you must use Microsoft's implementation of ranging.
> How do I get the members list via openldap with ranging ? I tried googling this but could not get much information about ranging or getting the "Domain Users" group members ?
> Can you point me to some relevant link ?
> Thanks.
> Sankar