Re: users have gray hair in Domain Users group

From: Cary Shultz [A.D. MVP] (cwshultz_at_mvps.org)
Date: 02/25/04 

Date: Tue, 24 Feb 2004 22:25:59 -0500

Chris,

Simon posted this same question back on the 5th of February. I do not
believe that anyone has responded with an answer yet! To my knowledge you
have found the only MSKB article that makes any mention of 'gray' or 'grey'
haired members.

I will do some more research on this.

HTH,

Cary

"Chris Jones" <anonymous@discussions.microsoft.com> wrote in message
news:5A22C2F3-E939-4BC2-81A6-ABD87C8A29C7@microsoft.com...
> We have 1 forest with three domains: two tree domains and one child
domain. The members of domain users group in both of the tree domains have
gray haired icons and the child domain has the normal black haired icon. I
found kb281923 that talks about these symptoms when the membership is over
500 members.
>
> However, when I use the below script to enumerate the membership of the
domain users group in each of the domains, no user accounts are returned. To
verify there were no issues in my script, I tried enumerating a different
global group and the scripted worked like a champ. Does anybody know of
any reasons why I cannot enumerate the Domain Local group?
>
> If I look at the group with the Domain Users and Computers mmc, the group
is populated as you would expect (just the users hair is gray instead of
black). Thanks in advance for any help! When I echo out the adspath, the
ldap path is correct.
>
> Option Explicit
> Dim oGroup, groupmember
> Set oGroup = GetObject("LDAP://cn=domain
users,cn=Users,dc=MyDomain,dc=root")
> wscript.echo ogroup.adspath
> For Each groupmember In ogroup.members
> wscript.echo groupmember.cn
> Next

Relevant Pages

  • Re: users have gray hair in Domain Users group
    ... The members of domain users group in both of the tree domains have ... when I use the below script to enumerate the membership of the ... domain users group in each of the domains, ... any reasons why I cannot enumerate the Domain Local group? ...
    (microsoft.public.win2000.active_directory)
  • Re: Add all users to a grouop - Help please
    ... I need to all all domain users to a group. ... script that read all the members of Group1 and added them in this new ... I re-ran the script for Group2 when asked. ... IsMember and Add methods of the group object. ...
    (microsoft.public.scripting.vbscript)
  • Re: Add all users to a grouop - Help please
    ... I need to all all domain users to a group. ... I re-ran the script for Group2 when asked. ... When you are done you will have two groups with exactly the same members. ... "Domain users" will contain all accounts in the domain, ...
    (microsoft.public.scripting.vbscript)
  • Re: Listing users from "Domain Users" group using AD query
    ... I want to know how to script listing of users in the "Domain Users" ... I've tried binding to the object and asking for the "members" entry ... but in the 'primaryGroupID' attribute on the user ...
    (microsoft.public.windows.server.scripting)
  • Re: enumerating Domain Users Group
    ... > I am using the below script to enumerate each user in the Domain Local ... Is it the "domain users" group you are interested in (as suggested by the ... > For Each groupmember In ogroup.members ...
    (microsoft.public.windows.server.scripting)