I'm trying to get a list of the members of a group in Active Directory. I'm using LDAP queries, but I think that's not relevant. I've found what I believe to be an inconsistency in Active Directory's group membership information:
A security group
G has been created with Global scope. Viewing
G's properties using the AD Users and Computers MMC Snap-in shows three users,
C on the Members tab.
However, on viewing the User properties of
G listed on the 'Member Of' tab -
G is not present on the 'Member Of' tab of user
How can it be that a user is in the Members list of a group, but that group is not in the 'Member Of' list for that user?
(note that the group
G is not any user's primary group)
(I originally thought this was an LDAP querying problem, but it isn't: the queries accurately report the information in Active Directory, and it's that that's inconsistent)