Why did important AD groups “lost” some of their members?
My task was to find out which members were missing.
Well, I found something very interesting in the meta data of the Active Directory Group.
Where to find deleted group members?
You can still find the deleted members in the meta data of the Active Directory group.
They appear in the meta data with the type ABSENT (screenshot below).
Run repadmin /showmeta to see the relevant meta data.
In the AD group “DL-SharePointSrvAdministrator” the groups “GG-A-WebSrvAdmins” and “GG-A-SQLAdmins” were deleted.
But you can still find these old group-members in the metadata of the group “DL-SharePointAdministrator”.
You can re-include these groups as members even though you did not know at the start which members were deleted.