Trying to filter/sort/find by Group Membership in ADUC

[Bill]

I know this should be a 'no-brainer' but...

When using Active Directory Users and Computers, I have been trying to
filter (return) User records based on GROUP MEMBERSHIP. I've tried creating
a custom USER filter based on MEMBER OF - using (Starts with, Ends with, is,
etc) but no records are ever returned. But if I use the "IS NOT" condition
then ALL RECORDS are returned. I have been entering the GROUP NAME as the
field value.

I have also tried to filter using a GROUP filter based on MEMBER field, but
again that returns no values.

I now assume that I should be using something other than the GROUP NAME as
the condition "value" but I'm not sure what. Is group membership stored as
a binary value and not a string like the other values seem to be?

I've searched the KBs and with Google, but evidently this is so easy it does
not need to be documented. I would think being able to retrieve a selected
group of users out of a container or OU "based on group membership" would be
something everyone would want to do from time to time. Why isn't it
documented anywhere.

Can anyone help me out. - bill.

 

[Joe Richards [MVP]]

It would help if you showed the filter you were trying to use but I am going to
have to guess you did something like member=joe or something like that right?

The member attribute has values that are DNs so you actually need to do
something like member=cn=joe,cn=users,dc=domain,dc=com.

If my assumption is incorrect, please post details.

joe