I am working with an application vendor. This application needs to import a list of Active Directory users. The application needs an AD group as part of its search.
I told the vendor to use the built in group “Domain Users”
I expected the user list to be around 40,000 if the application excluded disabled user accounts.
The application only returned 46 users…
If I open the group in ADUC I can see thousands of users in the Members tab. If I open the attribute editor tab and go to the “member” attribute I can see only 46 users.
PowerShell confirms this discrepancy. If I run a command to list the membership attribute via Get-ADGroup I receive 46 users. If I use Get-ADGroupMembers powershell will return all 40k users.
Is there any way to fix the attribute on this group?
When new users are added "Domain Users" is the default group they are added to. How can I fix this permanently for new users?