4.1.4 Example of GetADPrincipalGroupMembership

  • Article

In this section, there is an example of a GetADPrincipalGroupMembership request and a GetADPrincipalGroupMembershipResponse.

GetADPrincipalGroupMembership SOAP request:

 <soapenv:Envelope
     xmlns:soapenv="http://www.w3.org/2003/05/soap-envelope"
     xmlns:wsa="http://www.w3.org/2005/08/addressing">
   <soapenv:Header>
     <wsa:Action soapenv:mustUnderstand="1">http://schemas.microsoft.com/2008/1/ActiveDirectory/CustomActions/AccountManagement/GetADPrincipalGroupMembership</wsa:Action>
     <ca:Server
         xmlns:ca="http://schemas.microsoft.com/2008/1/ActiveDirectory/CustomActions"
         xmlns="http://schemas.microsoft.com/2008/1/ActiveDirectory/CustomActions">ldap:389</ca:Server>
     <wsa:MessageID>urn:uuid:4d9a0454-098e-4ff6-aa7c-b1e36c517e08</wsa:MessageID>
     <wsa:ReplyTo>
       <wsa:Address>http://www.w3.org/2005/08/addressing/anonymous</wsa:Address>
     </wsa:ReplyTo>
     <wsa:To soapenv:mustUnderstand="1">net.tcp://server01.fabrikam.com:9389/ActiveDirectoryWebServices/Windows/AccountManagement</wsa:To>
   </soapenv:Header>
   <soapenv:Body
     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
     xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <GetADPrincipalGroupMembershipRequest xmlns="http://schemas.microsoft.com/2008/1/ActiveDirectory/CustomActions">
       <PartitionDN>DC=fabrikam,DC=com</PartitionDN>
       <PrincipalDN>CN=Administrator,CN=Users,DC=fabrikam,DC=com</PrincipalDN>
       <ResourceContextPartition xsi:nil="true"></ResourceContextPartition>
       <ResourceContextServer xsi:nil="true"></ResourceContextServer>
     </GetADPrincipalGroupMembershipRequest>
   </soapenv:Body>
 </soapenv:Envelope>

GetADPrincipalGroupMembership SOAP response:

 <soapenv:Envelope
     xmlns:wsa="http://www.w3.org/2005/08/addressing"
     xmlns:soapenv="http://www.w3.org/2003/05/soap-envelope">
   <soapenv:Header>
     <wsa:Action soapenv:mustUnderstand="1">http://schemas.microsoft.com/2008/1/ActiveDirectory/CustomActions/AccountManagement/GetADPrincipalGroupMembershipResponse</wsa:Action>
     <wsa:RelatesTo>urn:uuid:4d9a0454-098e-4ff6-aa7c-b1e36c517e08</wsa:RelatesTo>
     <wsa:To soapenv:mustUnderstand="1">http://www.w3.org/2005/08/addressing/anonymous</wsa:To>
   </soapenv:Header>
   <soapenv:Body>
     <GetADPrincipalGroupMembershipResponse xmlns="http://schemas.microsoft.com/2008/1/ActiveDirectory/CustomActions">
       <MemberOf xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
         <ActiveDirectoryGroup>
           <DistinguishedName>CN=Domain Users,CN=Users,DC=fabrikam,DC=com</DistinguishedName>
           <Name>Domain Users</Name>
           <ObjectClass>group</ObjectClass>
           <ObjectGuid>dfc6c0e3-fccf-4149-8fe0-c284fff4cd89</ObjectGuid>
           <ObjectTypes xmlns:sera="http://schemas.microsoft.com/2003/10/Serialization/Arrays">
             <sera:string>top</sera:string>
             <sera:string>group</sera:string>
           </ObjectTypes>
           <ReferenceServer>fabrikam.com</ReferenceServer>
           <SID>AQUAAAAAAAUVAAAAAoo3LXgjlrY1VI2hAQIAAA==</SID>
           <SamAccountName>Domain Users</SamAccountName>
           <GroupScope>Global</GroupScope>
           <GroupType>Security</GroupType>
         </ActiveDirectoryGroup>
         <ActiveDirectoryGroup>
           <DistinguishedName>CN=Administrators,CN=Builtin,DC=fabrikam,DC=com</DistinguishedName>
           <Name>Administrators</Name>
           <ObjectClass>group</ObjectClass>
           <ObjectGuid>2b8118dc-3c2d-41a7-b0eb-4aa394fb991c</ObjectGuid>
           <ObjectTypes xmlns:sera="http://schemas.microsoft.com/2003/10/Serialization/Arrays">
             <sera:string>top</sera:string>
             <sera:string>group</sera:string>
           </ObjectTypes>
           <ReferenceServer>fabrikam.com</ReferenceServer>
           <SID>AQIAAAAAAAUgAAAAIAIAAA==</SID>
           <SamAccountName>Administrators</SamAccountName>
           <GroupScope>DomainLocal</GroupScope>
           <GroupType>Security</GroupType>
         </ActiveDirectoryGroup>
         <ActiveDirectoryGroup>
           <DistinguishedName>CN=Schema Admins,CN=Users,DC=fabrikam,DC=com</DistinguishedName>
           <Name>Schema Admins</Name>
           <ObjectClass>group</ObjectClass>
           <ObjectGuid>ee95c61f-b971-4b07-9936-6814ec8bcb57</ObjectGuid>
           <ObjectTypes xmlns:sera="http://schemas.microsoft.com/2003/10/Serialization/Arrays">
             <sera:string>top</sera:string>
             <sera:string>group</sera:string>
           </ObjectTypes>
           <ReferenceServer>fabrikam.com</ReferenceServer>
           <SID>AQUAAAAAAAUVAAAAAoo3LXgjlrY1VI2hBgIAAA==</SID>
           <SamAccountName>Schema Admins</SamAccountName>
           <GroupScope>Universal</GroupScope>
           <GroupType>Security</GroupType>
         </ActiveDirectoryGroup>
         <ActiveDirectoryGroup>
           <DistinguishedName>CN=Enterprise Admins,CN=Users,DC=fabrikam,DC=com</DistinguishedName>
           <Name>Enterprise Admins</Name>
           <ObjectClass>group</ObjectClass>
           <ObjectGuid>021a8f3c-7406-40ec-8ce9-5d431cff8e71</ObjectGuid>
           <ObjectTypes xmlns:sera="http://schemas.microsoft.com/2003/10/Serialization/Arrays">
             <sera:string>top</sera:string>
             <sera:string>group</sera:string>
           </ObjectTypes>
           <ReferenceServer>fabrikam.com</ReferenceServer>
           <SID>AQUAAAAAAAUVAAAAAoo3LXgjlrY1VI2hBwIAAA==</SID>
           <SamAccountName>Enterprise Admins</SamAccountName>
           <GroupScope>Universal</GroupScope>
           <GroupType>Security</GroupType>
         </ActiveDirectoryGroup>
         <ActiveDirectoryGroup>
           <DistinguishedName>CN=Domain Admins,CN=Users,DC=fabrikam,DC=com</DistinguishedName>
           <Name>Domain Admins</Name>
           <ObjectClass>group</ObjectClass>
           <ObjectGuid>20c934d9-a6e0-45b2-b26b-8a4948f333b2</ObjectGuid>
           <ObjectTypes xmlns:sera="http://schemas.microsoft.com/2003/10/Serialization/Arrays">
             <sera:string>top</sera:string>
             <sera:string>group</sera:string>
           </ObjectTypes>
           <ReferenceServer>fabrikam.com</ReferenceServer>
           <SID>AQUAAAAAAAUVAAAAAoo3LXgjlrY1VI2hAAIAAA==</SID>
           <SamAccountName>Domain Admins</SamAccountName>
           <GroupScope>Global</GroupScope>
           <GroupType>Security</GroupType>
         </ActiveDirectoryGroup>
         <ActiveDirectoryGroup>
           <DistinguishedName>CN=Group Policy Creator Owners,CN=Users,DC=fabrikam,DC=com</DistinguishedName>
           <Name>Group Policy Creator Owners</Name>
           <ObjectClass>group</ObjectClass>
           <ObjectGuid>fe80c15c-07b2-4184-a163-1ecebed3bd48</ObjectGuid>
           <ObjectTypes xmlns:sera="http://schemas.microsoft.com/2003/10/Serialization/Arrays">
             <sera:string>top</sera:string>
             <sera:string>group</sera:string>
           </ObjectTypes>
           <ReferenceServer>fabrikam.com</ReferenceServer>
           <SID>AQUAAAAAAAUVAAAAAoo3LXgjlrY1VI2hCAIAAA==</SID>
           <SamAccountName>Group Policy Creator Owners</SamAccountName>
           <GroupScope>Global</GroupScope>
           <GroupType>Security</GroupType>
         </ActiveDirectoryGroup>
       </MemberOf>
     </GetADPrincipalGroupMembershipResponse>
   </soapenv:Body>
 </soapenv:Envelope>