Unable to run dsquery / dsget for large number of group members

Hi,

I am trying to run dsquery / dsget batch commands to get the members of a
few global security groups and put the output into a text file. I have
tested a few groups and found that ht e security groups with small group
membership work ok, however groups that have a very large list of members it
not return any records in the text file.

The command I have run successfully for groups with a small list of members
is:
DSQUERY group "groupDN" | DSGET group -members >>textfile.txt

Is there a limit of members that will not return a value from this command?
Is there a way of using DSQUERY and DSGET to produce an output for security
groups with a large list of members if there is a limit?

Any help will be greatly appreciated.

Thanks
Steve

does this have any bearing on your problem?

-limit <NumObjects> Specifies the number of objects matching the
given criteria to be returned, where
<NumObjects>
is the number of objects to be returned.
If the value of <NumObjects> is 0,
all matching objects are returned.
If this parameter is not specified,
by default the first 100 results are displayed.

-ajm



"Steve Jackson" <jacko2401@blueyonder.co.uk> wrote in message
news:_d49g.272551$8Q3.39799@fe1.news.blueyonder.co.uk...
> Hi,
>
> I am trying to run dsquery / dsget batch commands to get the members of a
> few global security groups and put the output into a text file. I have
> tested a few groups and found that ht e security groups with small group
> membership work ok, however groups that have a very large list of members
> it not return any records in the text file.
>
> The command I have run successfully for groups with a small list of
> members is:
> DSQUERY group "groupDN" | DSGET group -members >>textfile.txt
>
> Is there a limit of members that will not return a value from this
> command? Is there a way of using DSQUERY and DSGET to produce an output
> for security groups with a large list of members if there is a limit?
>
> Any help will be greatly appreciated.
>
> Thanks
> Steve
>

[mliben]

Getting the members of groups with more than 1000 members (W2K) or 1500 (W2K3 or later) often requires a bit of extra work. You also need to consider the type of group as often visibility is constrained in a multi-domain forest.

Some discussion and sample .Net code can be found. That page contains links to some Microsoft KBs as well.

HTH