Idea: MemberOf property may not handle cross-domain objects

[oconnell-sean]

Group : Domain_One\GroupA

Members:

1. Domain_One\GroupB

2. Domain_Two\GroupC

$GroupA = Get-ADGroup GroupA

Get-ADGroup -ldapfilter “(memberOf=$(GroupA.DistinguishedName))”

I think this would only return group objects that are in the same domain. Domain_One\GroupB.

If Domain_Two\GroupC was a member of GroupA it would be excluded.

unless you do a pass of each domain or maybe a Global Catalog .... -Server Domain_Two

Also, May want to account for Fsp objects that are members of groups.

[compwiz32]

@oconnell-sean Hey Sean. I am sorry for the delay in responding on this issue. You didn't reference a file; which script were you referring to?