Get-ADPrincipalGroupMembership Error

I can no longer use Get-ADPrincipalGroupMembership on Windows 8.1 enterprise. Whenever I run the cmdlet I get this error:

Get-ADPrincipalGroupMembership : The server was unable to process the request due to an internal error.  For more information about the error, either turn
on IncludeExceptionDetailInFaults (either from ServiceBehaviorAttribute or from the <serviceDebug> configuration behavior) on the server in order to send
the exception information back to the client, or turn on tracing as per the Microsoft .NET Framework SDK documentation and inspect the server trace logs.
At line:1 char:1
+ Get-ADPrincipalGroupMembership -Identity johndoe
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (johndoe:ADPrincipal) [Get-ADPrincipalGroupMembership], ADException
    + FullyQualifiedErrorId : ActiveDirectoryServer:0,Microsoft.ActiveDirectory.Management.Commands.GetADPrincipalGroupMembership

This happens whether I pipe an AD user to the cmdlet or use explicit parameters. I found one other article where this happened because some group names contained a "/" character, but I have verified that none of our groups contain anything other than alphanumeric characters, spaces, and ampersands.

I have tried fully removing and re-installing the Windows 8.1 RSAT, but this did not fix the issue. To work around this I am currently running AD cmdlets on a server, but would like to fix this on my workstation.

I am running PS version 5.0.10105.0. I know this is a preview version, but I have been running the previews since the February release and this has been working until now. Thanks!

Does anyone know why this might be happening?

Thanks!
  • Edited by Matt McNabb Tuesday, August 18, 2015 2:17 PM
August 18th, 2015 2:14pm

Richard,

Thanks for the detailed response!

I really don't think the "/" is the issue as this works on at least one other computer (Server 2012 R2 with PS 4.0) but stopped working on my workstation with 8.1 and PS 5.0. I ran the command below and got no results:

get-adgroup -Filter * | where distinguishedname -like '*/*'

This also happens with any user I try, not just select users which also indicates that the "/" is not the issue. Interestingly, Add-ADPrincipalGroupMembership and Remove-ADPrincipalGroupMembership seem to work just fine.

Free Windows Admin Tool Kit Click here and download it now
August 19th, 2015 7:45am

Isn't $_.distinguishedName required after the pipe? I use:

Get-ADGroup -Filter * | Where {$_.distinguishedName -Like '*/*'}

In any case, there appears to be a new problem with the PowerShell V5 Get-ADPrincipalGroupMemebership. I don't have PS 5 so I cannot test further.
August 19th, 2015 10:20am

Isn't $_.distinguishedName required after the pipe? I use:

Get-ADGroup -Filter * | Where {$_.distinguishedName -Like '*/*'}

In any case, there appears to be a new problem with the PowerShell V5 Get-ADPrincipalGroupMemebership. I don't have PS 5 so I cannot tes
Free Windows Admin Tool Kit Click here and download it now
August 19th, 2015 11:27am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics