KNOWLEDGE BASE

Users Not Importing from Active Directory Domain Users Group


Published: 17 Oct 2014
Last Modified Date: 30 Sep 2015

Issue

When importing users from the Active Directory Domain Users group, fewer users are imported than expected.

Environment

  • Tableau Server
  • Active Directory

Resolution

This is expected behavior. By default, the Domain Users group does not contain actual user objects. In order to add all domain user accounts, work with your domain administrator to create a new group in Active Directory and assign all domain users to this group. Then import the new group into Tableau Server

Cause

Domain Users is a special Active Directory group which does not have any users directly assigned to it (unless manually assigned), but shows all users in various tools (i.e. Active Directory Users and Computers).

Additional Information

To confirm what objects are really located within Domain Users group, the following command could be used on any desktop machine joined to the domain:
ldifde -f groupexport1.ldf -p subtree -r "(&(objectCategory=group )(objectClass=group))" -l "member,cn,objectclass")

 
Did this article resolve the issue?