users have gray hair in Domain Users group

From: Chris Jones (anonymous_at_discussions.microsoft.com)
Date: 02/24/04 

Date: Tue, 24 Feb 2004 12:26:08 -0800

We have 1 forest with three domains: two tree domains and one child domain. The members of domain users group in both of the tree domains have gray haired icons and the child domain has the normal black haired icon. I found kb281923 that talks about these symptoms when the membership is over 500 members.

However, when I use the below script to enumerate the membership of the domain users group in each of the domains, no user accounts are returned. To verify there were no issues in my script, I tried enumerating a different global group and the scripted worked like a champ. Does anybody know of any reasons why I cannot enumerate the Domain Local group?

If I look at the group with the Domain Users and Computers mmc, the group is populated as you would expect (just the users hair is gray instead of black). Thanks in advance for any help! When I echo out the adspath, the ldap path is correct.

Option Explicit
Dim oGroup, groupmember
Set oGroup = GetObject("LDAP://cn=domain users,cn=Users,dc=MyDomain,dc=root")
wscript.echo ogroup.adspath
For Each groupmember In ogroup.members
        wscript.echo groupmember.cn
Next

Relevant Pages

  • enumerating Domain Users Group
    ... If I look at the group with the Domain Users and Computers mmc, the group is populated as you would expect. ... Dim oGroup, groupmember ... For Each groupmember In ogroup.members ...
    (microsoft.public.windows.server.scripting)
  • Re: enumerating Domain Users Group
    ... > I am using the below script to enumerate each user in the Domain Local ... Is it the "domain users" group you are interested in (as suggested by the ... > For Each groupmember In ogroup.members ...
    (microsoft.public.windows.server.scripting)
Loading