Remove decommissioned cross domain group from user
I have a user that is a member of a group in another domain that was decommissioned. Thus, when accessing the user account, there is an error that throws that a domain controller could not be contacted. This is creating issues for the user.
The set up is a root domain, acme.com and two child domains, na.acme.com and xyz.acme.com. xyz.acme.com is decommissioned. The user account belongs to na.acme.com and the group resided in xyz.acme.com.
The only way to get a list of groups the account belongs to without throwing an error is the following command:
(Get-ADUser -Identity <useraccount> -Properties MemberOf | select MemberOf).MemberOf
If I pipe the command to Remove-ADGroupMember or Remove-ADPrincipalGroupMemberShip it will of course throw an error that it cannot find the group.
All the research I've done I cannot find a way to forcibly remove this group from the user account.
Thank you for asking this question on the **Microsoft Q&A Platform. **
You have not received answers or comments to your question because it may be ambiguous or confusing.
I recommend you visit How to write a quality question and verify that your question meets some of the recommendations.
Hope this helps,
Carlos Solís Salazar
NOTE: To answer you as quickly as possible, please mention me in your reply.
Sign in to comment