Remove decommissioned cross domain group from user

Mark Hellervik 1

I have a user that is a member of a group in another domain that was decommissioned. Thus, when accessing the user account, there is an error that throws that a domain controller could not be contacted. This is creating issues for the user.
The set up is a root domain, acme.com and two child domains, na.acme.com and xyz.acme.com. xyz.acme.com is decommissioned. The user account belongs to na.acme.com and the group resided in xyz.acme.com.
The only way to get a list of groups the account belongs to without throwing an error is the following command:
(Get-ADUser -Identity <useraccount> -Properties MemberOf | select MemberOf).MemberOf
If I pipe the command to Remove-ADGroupMember or Remove-ADPrincipalGroupMemberShip it will of course throw an error that it cannot find the group.

All the research I've done I cannot find a way to forcibly remove this group from the user account.

Carlos Solís Salazar 18,061 Reputation points MVP

2022-07-12T00:29:25.47+00:00

Thank you for asking this question on the **Microsoft Q&A Platform. **

You have not received answers or comments to your question because it may be ambiguous or confusing.

I recommend you visit How to write a quality question and verify that your question meets some of the recommendations.

Hope this helps,
Carlos Solís Salazar

----------

NOTE: To answer you as quickly as possible, please mention me in your reply.

Share via

Remove decommissioned cross domain group from user

Your answer