[ActiveDir] adfind / dsquery Group Membership incomplete

[Noah Eiger]

Hi -

 

I must be missing something very basic. Why is it that when I run one of the following queries, I only get seven of the 11 objects that show up in the Domain Admins when using the dsa.msc?

 

adfind -b dc=company,dc=com -f "objectclass=group" member
dsquery group -name "Domain Admins" | dsget group -members

 

Thanks,

 

-- nme