Group Member Query

[Guest]

Can you send me the query you use to display a list of users in a group. For some reason, when I use (objectCategory=user)(memberOf=CN=Domain Users,CN=Users,DC=xx,DC=xx,DC=com)
I do not get the correct list of members. When I use Hyena I do.

[kstanush]

Re: Group Member Query

You can't use LDAP or AD to query to get a list of a user's group memberships or a group's members. We use a Microsoft interface to get that information, then have to do a lot of work in order to get the full list due to how Microsoft has implemented the primary group information. You will find that the memberof information is not updated with respect to the primary group.

[Guest]

Re: Group Member Query

You are right! I'm missing members if they are set as primary on the group I am querying. Is there a query to display this info that needs to be combined?

<div class="ubbcode-block"><div class="ubbcode-header">Quote:</div><div class="ubbcode-body">Originally posted by kstanush:
<span style="font-weight: bold">You can't use LDAP or AD to query to get a list of a user's group memberships or a group's members. We use a Microsoft interface to get that information, then have to do a lot of work in order to get the full list due to how Microsoft has implemented the primary group information. You will find that the memberof information is not updated with respect to the primary group.</span></div></div>

[kstanush]

Re: Group Member Query

No, there isn't any way to do this in a simple query. AD is unfortunately not designed as a relational database or follows any consistent and predictable rules.