Author Posts

January 1, 2012 at 12:00 am

by dsf3g at 2012-11-02 06:14:10

So I've searched a great deal online and run a search here and cannot find a good answer.

In Quest's AD Powershell command extensions you can increase the maximum number of items a query returns with the -SizeLimit parameter.

Is there an equivalent for Microsoft's own AD commandlets?

I'm trying a "get-adgroupmember" against a very large group and bumping up against this limit.

by JeffH at 2012-11-02 09:18:06

Typically the MS cmdlets return everything. I know on Get-ADUser you can use -ResultSetSize which I believe is equivalent to Quest's -SizeLimit parameter. But it doesn't exist on Get-ADGroupMember. How many members are there in the group? Are you getting any errors? How many members is it retrieving?

by JeffH at 2012-11-02 10:16:42

Ok. I built a group with 5000+ members and now get the error. Researching.

by JeffH at 2012-11-02 10:30:41

Get-ADGroupMember just won't work with really large groups. But here is a work around. Get the group with Get-ADGroup and include the Members property.

$grp = Get-ADGroup -identity "Test Group 1" -properties Members
$grp.members.count

The value of $members will be the distinguished name of each member. You could pipe this to get-ADUser if you want to display more information.

by dsf3g at 2012-11-07 10:06:58

Thank you. I guess I'll have to stick with Quest for these queries.