Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2157
  • Last Modified:

AD Explorer Question

Yesterday I downloaded AD Explorer by Sysinternals for the first time.  When I looked at the membership of my Domain Users group in AD Explorer, it only listed 12 members even though our domain has thousands of users.  When I entered Active Directory Users and Computers and viewed several user accounts, they were all listed as members of Domain Users but weren't listed in the Domain Users membership in AD Explorer.

Can somebody shed some light?
0
snoopfrogg
Asked:
snoopfrogg
1 Solution
 
Chris DentPowerShell DeveloperCommented:

Hey,

The underlying attribute the normally shows group membership (on a group) is "member" AD Explorer will be using that one. However, if a group is set as the Primary Group the member isn't displayed in the "member" attribute, instead it's caught by linking the PrimaryGroupToken (on the group) to the PrimaryGroupID (on the user account).

I suspect that each of those 12 users have a different Primary Group set, which is why they're appearing in there. The rest won't appear because it is their Primary Group.

Chris
0
 
snoopfroggAuthor Commented:
Ah!  Appreciate it Chris.  There's a really good reason why you're a Directory Services MVP!
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now