Windows Server 2016
A Microsoft server operating system that supports enterprise-level management updated to data storage.
2,374 questions
AD USER properites not show this group from ge.t.com
remove AD user memberof
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(6.4, 95%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAD%3C/text%3E%3C/svg%3E)
Alan Du
140
Reputation points
Hi All：
My AD is subdomain,domain name is cn.t.com
when open ad user properies,member of
show error
I type get-aduser, runsn1 memerof have a group:from ge.t.com
other user jahwa1 is correct
I try to delete this group,but cannot find an object
because this group from ge.t.com
my Domain is cn.t.com
What can I remove this AD user memberof?
TKS
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 74%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERM%3C/text%3E%3C/svg%3E)
Rich Matheisen 44,856 Reputation points2024-02-21T18:54:54.97+00:00 Is there a domain named "ge.t.com" in your AD forest? If there isn't now, was there ever such a domain in the AD forest? If there was, how was it removed? Given the minimal information in your question, this looks more like a problem introduced by poor AD maintenance processes. While it's not pertinent to your problem, is there a reason you're placing users into simple Containers instead of OrganizationaUnits?
-
Alan Du 140 Reputation points
2024-02-25T01:35:40.3266667+00:00 I is not AD forest administrator. ge.t.com is t.com subdomain. I don't know why some users automatically join this group. How to enforce remove this group from user properies?
-
Rich Matheisen 44,856 Reputation points
2024-02-26T15:47:13.5533333+00:00 Before you do anything I think you should first engage with the people that manage your AD and explain your problem.
If you want to be a daredevil, try using ADSIEdit to remove that item from the groups' members collection. Be sure to remove the groups' identity from the users' memberOf collection, too.
ADSIEdit, like any low-level tool should be used with care. Think of it as a Swiss Army Chainsaw -- you might unintentionally cut off your own leg if you aren't careful.
-
Alan Du 140 Reputation points
2024-02-28T02:18:11.4533333+00:00 TKS.How to use ADSI EDIT to remove this item from the group? This user (runsn1) is a testing user.
-
Rich Matheisen 44,856 Reputation points
2024-02-28T15:42:27.3666667+00:00 Well, I suppose you could try looking for that information! It's not hard. https://theitbros.com/adsi-edit/
Sign in to comment
1 answer
Sort by: Most helpful
-
Alan Du 140 Reputation points
2024-02-21T03:44:51.52+00:00