remove AD user memberof

Question

remove AD user memberof

杜卫华 240

Hi All： My AD is subdomain,domain name is cn.t.com when open ad user properies,member of show error I type get-aduser, runsn1 memerof have a group:from ge.t.com other user jahwa1 is correct

I try to delete this group,but cannot find an object because this group from ge.t.com my Domain is cn.t.com What can I remove this AD user memberof? TKS

Rich Matheisen 47,901 Reputation points

2024-02-21T18:54:54.97+00:00

Is there a domain named "ge.t.com" in your AD forest? If there isn't now, was there ever such a domain in the AD forest? If there was, how was it removed? Given the minimal information in your question, this looks more like a problem introduced by poor AD maintenance processes. While it's not pertinent to your problem, is there a reason you're placing users into simple Containers instead of OrganizationaUnits?
杜卫华 240 Reputation points

2024-02-25T01:35:40.3266667+00:00

I is not AD forest administrator. ge.t.com is t.com subdomain. I don't know why some users automatically join this group. How to enforce remove this group from user properies?
Rich Matheisen 47,901 Reputation points

2024-02-26T15:47:13.5533333+00:00

Before you do anything I think you should first engage with the people that manage your AD and explain your problem.

If you want to be a daredevil, try using ADSIEdit to remove that item from the groups' members collection. Be sure to remove the groups' identity from the users' memberOf collection, too.

ADSIEdit, like any low-level tool should be used with care. Think of it as a Swiss Army Chainsaw -- you might unintentionally cut off your own leg if you aren't careful.
杜卫华 240 Reputation points

2024-02-28T02:18:11.4533333+00:00

TKS.How to use ADSI EDIT to remove this item from the group? This user (runsn1) is a testing user.
Rich Matheisen 47,901 Reputation points

2024-02-28T15:42:27.3666667+00:00

Well, I suppose you could try looking for that information! It's not hard. https://theitbros.com/adsi-edit/

1 answer

Your answer

Rich Matheisen 47,901 Reputation points

2024-02-21T18:54:54.97+00:00

Is there a domain named "ge.t.com" in your AD forest? If there isn't now, was there ever such a domain in the AD forest? If there was, how was it removed? Given the minimal information in your question, this looks more like a problem introduced by poor AD maintenance processes. While it's not pertinent to your problem, is there a reason you're placing users into simple Containers instead of OrganizationaUnits?
杜卫华 240 Reputation points

2024-02-25T01:35:40.3266667+00:00

I is not AD forest administrator. ge.t.com is t.com subdomain. I don't know why some users automatically join this group. How to enforce remove this group from user properies?
Rich Matheisen 47,901 Reputation points

2024-02-26T15:47:13.5533333+00:00

Before you do anything I think you should first engage with the people that manage your AD and explain your problem.

If you want to be a daredevil, try using ADSIEdit to remove that item from the groups' members collection. Be sure to remove the groups' identity from the users' memberOf collection, too.

ADSIEdit, like any low-level tool should be used with care. Think of it as a Swiss Army Chainsaw -- you might unintentionally cut off your own leg if you aren't careful.
杜卫华 240 Reputation points

2024-02-28T02:18:11.4533333+00:00

TKS.How to use ADSI EDIT to remove this item from the group? This user (runsn1) is a testing user.
Rich Matheisen 47,901 Reputation points

2024-02-28T15:42:27.3666667+00:00

Well, I suppose you could try looking for that information! It's not hard. https://theitbros.com/adsi-edit/

Answer 1

杜卫华 240

AD USER properites not show this group from ge.t.com

Share via

remove AD user memberof

1 answer

Your answer