PowerShell Get-ADGroupMember Repeatedly Erroring

Question

Recently when I try and run Get-ADGroupMember it comes back with the error

Get-ADGroupMember : The server was unable to process the request due to an internal error. For more information about the error, either turn on IncludeExceptionDetailInFaults (either from
ServiceBehaviorAttribute or from the <serviceDebug> configuration behavior) on the server in order to send the exception information back to the client, or turn on tracing as per the
Microsoft .NET Framework SDK documentation and inspect the server trace logs.
At line:1 char:1

• Get-ADGroupMember -identity "GROUP"
• ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
• CategoryInfo : NotSpecified: (GROUP) [Get-ADGroupMember], ADException
• FullyQualifiedErrorId : ActiveDirectoryServer:0,Microsoft.ActiveDirectory.Management.Commands.GetADGroupMember**

I have restarted ADWS and this made no change (I had seen suggestions to do this here). I also checked the trust for the domain and it is bidirectional. I have had no issues running this cmdlet in the past. Any help is much appreciated.

Answer 1

Hi there,

This issue occurs if the group has a member from another forest whose account has been removed from the account forest. The member is represented in the local domain by a Foreign Security Principal (FSP).

To resolve this issue, enable logging for the resolution requests that concern these SIDs and that are performed by the Active Directory Webservice.

Here is a link for a detailed description of the process that you must follow.

https:// learn.microsoft.com/en-us/troubleshoot/windows-server/identity/get-adgroupmember-error-remote-forest-members

"Unable to process the request due to an internal error" After AD Upgrade

https://social.technet.microsoft.com/Forums/windows/en-US/e36d72ee-fc5b-48d2-beb7-2dbd5849cc58/quotunable-to-process-the-request-due-to-an-internal-errorquot-after-ad-upgrade?

-------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer–

Answer 2

A quick Google search.

The very first response seems to relate.

https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/get-adgroupmember-error-remote-forest-members