Unable to pull the group membership report from parent domain

Question

Unable to pull the group membership report from parent domain

sebastine 1

Unable to pull the group membership report from root domain after removing one of the tree domain where the group involves members from other domains. Getting attached error message for the reports that we pull for the groups that contain users from other tree domain. The same command was working fine earlier without any error.

Rich Matheisen 42,906 Reputation points

2021-02-15T16:05:29.517+00:00
Can you retrieve the group?

Get-ADGroup LCL-Office365-Information

If you can, have a look at the "members" property and see if there are distinguishedName values in the from the domain you removed. If there are, you'll have to remove them.
sebastine 1 Reputation point

2021-02-17T17:54:40.15+00:00

Thanks you i think that is an option. I will try it and update. Also i would like to know if there is any alternative way to pull report without manually removing the users distinguishedName values of old domain

Rich Matheisen 42,906

Sure. Get the group's 'members' property and try using Get-ADUser. Something like this:

(Get-ADGroup LCL-Office365-Information).members |
    ForEach-Object{
        $u = $_
        Try{
            Get-ADUser $_ -ErrorAction STOP
        }
        Catch{
            "Unable to get user: $u"
        }
    }

sebastine 1 Reputation point

2021-02-20T18:37:47.673+00:00

Thanks for your solution and it was very helpful

Rich Matheisen 42,906 Reputation points

2021-02-15T16:05:29.517+00:00

Can you retrieve the group?

Get-ADGroup LCL-Office365-Information

If you can, have a look at the "members" property and see if there are distinguishedName values in the from the domain you removed. If there are, you'll have to remove them.
sebastine 1 Reputation point

2021-02-17T17:54:40.15+00:00

Thanks you i think that is an option. I will try it and update. Also i would like to know if there is any alternative way to pull report without manually removing the users distinguishedName values of old domain
Rich Matheisen 42,906 Reputation points

2021-02-17T22:16:18.63+00:00

Sure. Get the group's 'members' property and try using Get-ADUser. Something like this:

(Get-ADGroup LCL-Office365-Information).members | ForEach-Object{ $u = $_ Try{ Get-ADUser $_ -ErrorAction STOP } Catch{ "Unable to get user: $u" } }
sebastine 1 Reputation point

2021-02-20T18:37:47.673+00:00

Thanks for your solution and it was very helpful

Unable to pull the group membership report from parent domain

Activity