Using FlexNet on prem 2023 R2:
I have created a report in FlexNet that should display all users in an Active Directory group. The report is simple enough but the results only show members of a specific group that are in the same domain as that group. We have group members that span domains so we need to see group members that belong to a different AD domain than the group was defined in. Querying AD directory through PowerShell using PowerShell CmdLet:
Get-ADGroupMember -Identity my_group_name
gives me ALL members across domains that belong to 'my_group_name'. I also check the database directly and do not see members from other domains so the SQL query also shows single domain group members.
-- Members of an AD Group
select adg.name,adu.SAMAccountName,ui.Domain,ui.UserName,ui.Email
from ActiveDirectoryGroup_MT adg
join ActiveDirectoryMember_MT adm on adm.ParentGroupGUID=adg.GUID
join ActiveDirectoryUser_MT adu on adu.GUID= adm.GUID
join userinfo ui on ui.SAMAccountName=adu.SAMAccountName
where adg.name = 'my_group_name'
Can someone confirm that the AD import for all domains will properly get group members across domains?
Jan 26, 2024 12:12 PM