LDAP Domain Users membership list 4 people, ADUC MMC snap-in 400

Giganews Newsgroups
Subject: LDAP Domain Users membership list 4 people, ADUC MMC snap-in 400
Posted by:  jpdicic…@gmail.com
Date: Mon, 12 May 2008

I'm having an issue with running a report against AD.  I'm trying to
build reports of group memberships via WSH (jscript), but my Domain
Users group keeps coming back with only 4 members.  When I view the
group in ADUC, all of the members show up.

It seems that any LDAP access method of checking the directory (dsget,
ADSI Edit, etc.) only shows 4 members, but ADUC and `net group /domain
"domain users"` show all of the members.

I need to know the following:
  1. Is Domain Users special this way or are other groups possibly
different in LDAP from their actual membership?
  2. Where is the membership stored, if not in the member attribute?
  3. How can I get a complete list of members programatically (jscript/
vbscript)?

Current domain and forest functional levels: Windows Server 2003

Any help would be appreciated.

Thanks in advance!

JP

Replies