I have a single domain forest at Windows Server 2003 functional level (Domain and Forest are both at 2003). We have 3 Domain Controllers running Windows Server 2003, all of which are Global Catalogs.
We have several Global Security Groups each with several members. However when using Active Directory users and Computers to view Members of these groups, the list is empty. If I go to individual users and check the list for Member Of, I do see the associated groups.
I've also tried to user the PowerShell Get-AdGroupMember
cmdlet, but it also returns an empty list.
The rights associated with these groups work for the associated users.
On the left is the Member Of list for my account. On the right is the group that I am a member of, but it shows no members on the Members tab.
If I add someone who is not a member already, they will be added and listed. The next time I load the properties page, it will show empty again. If I add someone who is already a member, when I try to save the Group it will tell me they are already a member.
So functionally it works. I just need to be able to enumerate the members.
Anyone see this before or have ideas on how to correct the issue?