Try this out: http://theessentialexchange.com/blogs/michael/archive/2012/05/04/processing-large-and-embedded-groups-in-powershell.aspx
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Russ Sent: Monday, April 24, 2017 5:32 PM To: ntsysadm@lists.myitforum.com Subject: [NTSysADM] Get group membership through powershell I've often used powershell to get the groups that a user is a member of by using get-adprincipalgroupmembership. It's always worked to my knowledge. However, I've found one group which doesn't show up for anyone - so I was curious if anyone has run into this before. If I run get-adgroupmember for the group, everyone shows up who should be there, but if I try to run the reverse on any of the users who are a member of the group, it doesn't show up - it just returns "domain users". If I try get-aduser with -properties "memberof", nothing shows up for that property at all. (not even domain users, but I think that's normal?). If you go into ADUC and look up the user, the two groups (this one, and domain users) show up just fine. Does anyone know of a circumstance why this wouldn't return a value?
