I'm trying to retrieve information about members of an active directory group using
dsget. The command retrieves some but not all members (53 of 141). The problem group contains a child group. The same command syntax with other groups not having a child group is successful. Docs for dsget make it clear quering sub groups is expected to work.
dsget group "CN=MyGroup,OU=Users and Groups,DC=example,DC=ca" -members -expand -c | dsget user -samid -display dsget failed:CN=SomeChildGroup,OU=Users and Groups,DC=example,DC=ca:The object class of the target does not match the one specified on the command line. type dsget /? for help. samid display dandithe Danny.Dithers adamaca Adam.Abacus sarahso Sarah.Soother colcust Colin.Custard
This is run on a client workstation (win7) from a user account that does not have any domain admin privileges. Adding or removing the
-expand parameter for recursively querying sub-groups seems to have no effect. Neither does
-c for continue on error.
Any idea what is wrong and how to work around it? Please keep in mind I have no domain privileges.