I would check the metadata on the group object and see if it is being constantly updated. This could signify that you have a restricted group configured and FRS has screwed up and the GPO isn't replicated to all DCs and the DCs are "duking it out" and changing the membership back and forth. I have seen this on several occasions. 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Holme
Sent: Monday, July 11, 2005 3:15 PM
To: [email protected]
Subject: [ActiveDir] DSQUERY & DSGET provide inconsistent results - help

A client is using DSQUERY is to dump a list of the Domain Admins group every 15 minutes or so.  They’re finding that it ‘misses’ some members—they’ll be there in one query, gone the next, then reappear.   Has anyone seen this behavior with this command?

 

dsquery group -name "%GRP%" | dsget group –members

 

We’re going to look at ADFind or just VBS to solve the problem too!!

 

Thanks!

 

 

Dan

Reply via email to