"Domain Users" group in Active Directory does not belong to any Group Membership in LC

[Former Community Member]

Active Directory user belonging to "Domain Users" group does not belong to any Group Membership in LC, why does it not belong to "Domain Users" group?

Any way to correct this issue, without changing group membership on AD side?



If Active Directory user is member of "Domain Admins" or "Users" then these show same group membership in LC.



Thanks.

[chetanm_oct]

If you want to use the Domain Users group for the purpose of representing all the users then you can use the "All principals in domain xxx" group which is created by UM.



Coming back to Domain Users group. For determining group membership in AD UM uses "member" attribute of the group object. "Domain Users" group is treated differently by AD. It is the default primary group for all the users and normally members of the primary group are not specified using the member attribute.So when we sync the data from AD "Domain Users" membership does not get completed.