Remove decommissioned cross domain group from user

Mark Hellervik 1 Reputation point
2022-07-06T16:35:40.833+00:00

I have a user that is a member of a group in another domain that was decommissioned. Thus, when accessing the user account, there is an error that throws that a domain controller could not be contacted. This is creating issues for the user.
The set up is a root domain, acme.com and two child domains, na.acme.com and xyz.acme.com. xyz.acme.com is decommissioned. The user account belongs to na.acme.com and the group resided in xyz.acme.com.
The only way to get a list of groups the account belongs to without throwing an error is the following command:
(Get-ADUser -Identity <useraccount> -Properties MemberOf | select MemberOf).MemberOf
If I pipe the command to Remove-ADGroupMember or Remove-ADPrincipalGroupMemberShip it will of course throw an error that it cannot find the group.

All the research I've done I cannot find a way to forcibly remove this group from the user account.

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,244 questions
{count} votes