<div>
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
</div>


This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.

<div>
<div class="content wysiwyg-content">
I'm trying to retrieve the local &nbsp;group membership (groups in my local domain) from Foreign Security Principals accounts (created after granting access to a resource to an account from a trusted domain) via VBScript. &nbsp;I'm using the code below but no matter what I do I'm not seeing the group membership. &nbsp;The code works fine with a normal account.<br />
<br />
Set objGroup = GetObject(&quot;LDAP://CN=S-1-5<wbr />-21-466423<wbr />297-191532<wbr />1860-20680<wbr />54413-2563<wbr />6,CN=Forei<wbr />gnSecurity<wbr />Principals<wbr />,DC=mydoma<wbr />in,DC=root<wbr />&quot;)<br />
<br />
arrGroups = objGroup.memberOf<br />
<br />
I can see the membership when I look in the AD Users and Computers console. <br />
<br />
Any ideas?<br />

</div>
</div>


I'm trying to retrieve the local  group membership (groups in my local domain) from Foreign Security Principals accounts (created after granting access to a resource to an account from a trusted domain) via VBScript.  I'm using the code below but no matter what I do I'm not seeing the group membership.  The code works fine with a normal account.

Set objGroup = GetObject("LDAP://CN=S-1-5-21-466423297-1915321860-2068054413-25636,CN=ForeignSecurityPrincipals,DC=mydomain,DC=root")

arrGroups = objGroup.memberOf

I can see the membership when I look in the AD Users and Computers console. 

Any ideas?


Unable to retrieve group membership of a Foreign Security Principals account

Databases are organized collections of data, most commonly accessed through management systems including schemas, tables, queries and processes that allow users to enter and manipulate the information or utilize it in other fashions, such as with web applications or for reporting purposes.

Databases

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

Active Directory

A scripting language is a programming language that supports scripts, programs written for a special run-time environment that automate the execution of tasks that could alternatively be executed one-by-one by a human operator. Scripting languages are often interpreted (rather than compiled). Primitives are usually the elementary tasks or API calls, and the language allows them to be combined into more complex programs. Environments that can be automated through scripting include software applications, web pages within a web browser, the shells of operating systems (OS), embedded systems, as well as numerous games. A scripting language can be viewed as a domain-specific language for a particular environment; in the case of scripting an application, this is also known as an extension language.