Re: Can Anyone Tell Me Why?

From: Mike Goodwin (mike.goodwin_at_oeconnection.com)
Date: 10/18/04 

Date: Mon, 18 Oct 2004 12:18:01 -0400

When I used WinNT instead of LDAP to connect to that domain group object...
it returned the membership results as expected. This seems like the easier
and quicker approach... yes/no?

"Mike Goodwin" <mike.goodwin@oeconnection.com> wrote in message
news:uoA6yiStEHA.1216@TK2MSFTNGP10.phx.gbl...
> Thanks for the reply Eric..
>
> On the surface that seemed doable, but now I have found this big ugly
script
> on MSDN to perform this simple second query and if fails on trying to
create
> an object that appantly I need to make this query... I am running on XP
Pro.
>
> MS Article Number: 297951
> Error :set ADsSid = CreateObject("ADsSID") ' this fails... can't create
> ActiveX Object (line 43)
>
> Is there an easier way to make this second query? Or where do I get this
> object from?
>
> Mike
>
>
> > Domain users group is somewhat special in that most of its members are a
> > member by virtue of the value in the primaryGroupID of the users. It's
the
> > other way that a user is a member of a group.
> > Issue a second query for all users with a primaryGroupID set to point to
> the
> > domain users group, and you'll probably find the rest.
> >
> > ~Eric
> >
> > --
> > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> > Use of included script samples are subject to the terms specified at
> > http://www.microsoft.com/info/cpyright.htm
> >
> >
> > "Mike Goodwin" <mike.goodwin@oeconnection.com> wrote in message
> > news:OOv3WJRtEHA.3984@TK2MSFTNGP09.phx.gbl...
> > > Can anyone tell me why this scrupt will only return a few of tha
actual
> > > members of my Domain Users group. There should be 150 or so members
and
> > > it
> > > shows 4. When I tried it at home, there should be 19 members and it
> shows
> > > 1.
> > >
> > > Both ADs are running on Windows 2000.
> > >
> > > Thanks In Advance...
> > >
> > > Mike Goodwin
> > >
> > > Sub GetDomainUsersMembers
> > > msg = ""
> > > Set objTarget = GetObject("LDAP://CN=Domain
> > > Users,CN=Users,DC=<SUBDOMAIN>,DC=<DOMAIN>,DC=COM")
> > > objTarget.GetInfo
> > > Set objItems = objTarget.Members
> > > Msgbox objItems.Count
> > >
> > > Set objItems = nothing
> > > For Each obj in objTarget.Members
> > > msg = msg & obj.Name & chr(13)
> > > Next
> > > msgbox "GROUP MEMBERS" & chr(13) & msg
> > > Set objTarget = nothing
> > > End Sub
> > >
> > >
> >
> >
>
>

Relevant Pages

  • RE: migrate primary group setting??
    ... Active Directory Migration Tool uses to migrate users from a different ... the Active Directory Migration Tool does not migrate the ... If the user that you migrade is a member of a global group, ... Domain Users group. ...
    (microsoft.public.windows.server.migration)
  • Re: Windows Server 2003 Auto connect printers;
    ... The Domain Users group is a member of the build in Users, ... Yes the TS is a member server, Authenticated Users is added to the local ...
    (microsoft.public.win2000.termserv.apps)
  • 550 5.7.1 Client does not have permission to send as this sender
    ... When a user (member of Domain Users group) is trying to send a message from ... the error "550 5.7.1 Client does not have permission to send as this ... SMTP message is accepted and delivered without problems. ...
    (microsoft.public.exchange.admin)
  • Re: Group limitations
    ... > member of that group by default. ... > the Domain Users group, and that group is set as their Primary Group. ... > This limitation doesn't just affect group membership. ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: Can Anyone Tell Me Why?
    ... I'll look around to see if someone has a canned script, ... > it returned the membership results as expected. ... >> on MSDN to perform this simple second query and if fails on trying to ... >>> Domain users group is somewhat special in that most of its members are ...
    (microsoft.public.windows.server.active_directory)
Loading