Unable to run dsquery / dsget for large number of group members
I want to run dsquery/dsget batch commands to get the members of some global security groups and put the output into a text file. I have already tested a few groups and found that the security groups with small group membership work fine, but groups that have very large list of members, it will not return any records in the text file. Can anyone tell me if there is a limit of members that will not return a value from this command and also if there is a way of using DSQUERY and DSGET to produce an output for security groups with a large list of members if there is a limit? Any ideas?
Re: Unable to run dsquery / dsget for large number of group members
Is the below having any bearing on your issues?
-limit <NumObjects>
Specifies the number of objects matching the given criteria to be returned, where
<NumObjects>
is the number of objects to be returned. If the value of <NumObjects> is 0, all matching objects are returned. If this parameter is not specified, by default the first 100 results are displayed.
Re: Unable to run dsquery / dsget for large number of group members
Getting the members of groups with more than 1000 members (W2K) or 1500 (W2K3 or later) often requires a bit of extra work. You also need to consider the type of group as often visibility is constrained in a multi-domain forest.
Some discussion and sample .Net code can be found. That page contains links to some Microsoft KBs as well.
HTH