I want to use ADGroup_GetUsers to retrieve a list of users in a security group.
However, when I call ADGroup_GetUsers, it returns an empty list. Additionally, there are no error messages.
What could be the possible causes?
Since ADGroup_List and ADGroup_Search return values correctly, I believe the connection to AD is working.
Thank you.
Hi @Yoshifumi Mizutani
Kindly refer this discussion link, it might help
https://www.outsystems.com/forums/discussion/26447/active-directory-ad-usersget-not-returning-all-users-from-ad/
Thanks,
Dhanasingh Dennison.
Hi Dhanasingh
Thank you for your response.
However, I read the site you provided, but it did not solve my problem.
I can retrieve group information using ADGroup_Get, etc., but when I try to get user information within the group using ADGroup_GetUsers, no users are returned.
I have confirmed that users are registered in the target group.
If you notice anything else, please let me know.
Could you give some technical detail on what you are doing/trying?
I found this component challenging as well, but I got it to work, eventually.
Ping me directly as we cleared these hurdles just today, so it is a little fresh in my memory.
Hi Joost,
I would like to accomplish the following tasks with the system created using OutSystems:
The user creating the token belongs to the "Account Operators" group in Active Directory.The program I created is very simple. After retrieving the group information using "ADGroup_Get", I attempt to retrieve user information by calling "ADGroup_GetUsers".The Token and GroupDN parameters passed are the same values for both "ADGroup_Get" and "ADGroup_GetUsers".While ADGroup_Get accurately returns the group information, ADGroup_GetUsers returns an empty list.I have confirmed that users are registered in the target group.
Hi Yoshifumi,I have had not getting users as a result of not having access. The account had the privileges to get all the groups, but not the users. Aren't you getting an error?
Are you using the GlobalDirectoryEntry_Set ( you could get an error there )?
Further more, there a probably more AD-domains; when I started I got the data from the wrong domain. ( We have several domains (OTAP), but we only use AD from P. So, in OT we needed to go cross domain.
As a test we have an ADgroup that contains 4k+ users. That takes a while to get.
We are not manipulating the AD in any way; that is for Identitiy managment to do.
Hi, Joost
The execution account has been granted permission to retrieve users. Also, no errors have occurred. It completes successfully, but an empty list is returned.
I tried using GlobalDirectoryEntry_Set (which I hadn't used before). As a result, no errors occurred, but the outcome remained unchanged.
Currently, there is only one AD domain.