“dsget user -memberof -expand” returns incorrect results in Windows Server 2008 R2 and Windows 7

This is an issue that I have come across and I thought it worth sharing.

There is a hotfix available for Windows 7 and Windows Server 2008 R2 for the dsget utility.

When the dsget user command is executed with the two switches –memberof and –expand,  the output is incorrect.   Only group information is expected to be returned but both group and user information is displayed.

Syntax: dsget user -memberof -expand

KB Article

Hotfix – Download