Although I have worked in big infrastructures, it is not long time ago, I have personally met with the limitation of ADWS service. Because exists good reasons why this limit should not be changed on DC server, command-let get-adgroupmember can be easily replaced by Get-ADGroup ‚GroupName‘ -properties Member | select-object -ExpandProperty member 🙂