hey Déji - I actually thought you had used AD before 2003 hit the market ;-) see my post on the same topic...
/Guido -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Dienstag, 8. November 2005 21:25 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] enterprise admin issues Normal behavior. It's not something you are doing (or not doing). The "MemberOf" attrib of a user in one domain does not include the group from another domain when you are enumerating from a user domain that is foreign to the group. Sincerely, Dèjì Akómöláfé, MCSE+M MCSA+M MCT Microsoft MVP - Directory Services www.readymaids.com - we know IT www.akomolafe.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon ________________________________ From: [EMAIL PROTECTED] on behalf of Tom Kern Sent: Tue 11/8/2005 12:11 PM To: activedirectory Subject: [ActiveDir] enterprise admin issues I have a strange issue where when i add someone to the enterpirse admin UG, that membership is reflected in the root domain but not in the child domain when i click the user's member of tab. I'm running a 2 domain wink2k3sp1 forest in FFL/DFL win2k3. The root is a resource domain. All dc's are gc's except the infra masters. there is no UG caching enabled. there are 3 sites. no errors in Directory service log. netdiag and dcdiag show no errors. repadmin /showvector /latency /dc=childdomain,dc=root,dc=local shows nothing being more than a few minutes behind. dns is ad-intergrated. site links are set to 15mins. any place else i should look? thanks List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
