Domain Users not showing up in "memberof"
when ldap search user, why doesn't "domain users" group show in users' (or of our users') "memberof" attribute? can see rest of "plain old ad security groups" i'm member of...but not domain users.
when ldap search domain users group, shows up....but doesn't show "member" attribute....so mean domain users group somehow treated differently "normal" ad security group? why doesn't domain users group show in user's memberof?
if wrong forum, please tell me 1 should post to.
in advance can provide!
when ldap search domain users group, shows up....but doesn't show "member" attribute....so mean domain users group somehow treated differently "normal" ad security group? why doesn't domain users group show in user's memberof?
if wrong forum, please tell me 1 should post to.
in advance can provide!
rich_12
hello,
quick info 513 (primarygrouptoken last digits):
sid: s-1-5-21domain-513
name: domain users
description: global group that, default, includes user accounts in domain. when create user account in domain, added group default.
if need ldap filter:
(&(objectcategory=person)(objectclass=user)(primarygroupid=513))
more info:
well-known security identifiers in windows operating systems
active directory: ldap syntax filters (richard mueller - mvp)
Windows Server > Directory Services
Comments
Post a Comment