Solved

AD Explorer Question

Posted on 2009-05-20
2
1,878 Views
Last Modified: 2012-05-07
Yesterday I downloaded AD Explorer by Sysinternals for the first time.  When I looked at the membership of my Domain Users group in AD Explorer, it only listed 12 members even though our domain has thousands of users.  When I entered Active Directory Users and Computers and viewed several user accounts, they were all listed as members of Domain Users but weren't listed in the Domain Users membership in AD Explorer.

Can somebody shed some light?
0
Comment
Question by:snoopfrogg
2 Comments
 
LVL 70

Accepted Solution

by:
Chris Dent earned 500 total points
ID: 24433592

Hey,

The underlying attribute the normally shows group membership (on a group) is "member" AD Explorer will be using that one. However, if a group is set as the Primary Group the member isn't displayed in the "member" attribute, instead it's caught by linking the PrimaryGroupToken (on the group) to the PrimaryGroupID (on the user account).

I suspect that each of those 12 users have a different Primary Group set, which is why they're appearing in there. The rest won't appear because it is their Primary Group.

Chris
0
 
LVL 11

Author Comment

by:snoopfrogg
ID: 24433619
Ah!  Appreciate it Chris.  There's a really good reason why you're a Directory Services MVP!
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

I'm sure that every Windows systems administrator has written, or at least used, a batch or VBS login script at some point in their career, whether it is to map network drives, install printers, or set some user preferences.  No more! With Window…
[b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now