Hi Sakari,
I assume you searched all possible containers and OUs for the groups.
You say access is still possible through the groups, so IMHO they MUST still
exist somehow/somewhere. If you login at a client using a user account that is
member of missing groups and then use WHOAMI or SECTOK f
You mention that this is a case you were told about, I take it you've not
confirmed what you're being told?
That aside, when you say NTDS dump, specifically what are you referring to?
--
Dean Wells
MSEtechnology
* Email: [EMAIL PROTECTED]
http://msetechnology.com
-Original Message-
From
Hi Jorge and Dean,
Answers and more description:
- I don't have personal access to the network in question, but I trust the guys
over there to give me quite correct information. Of course, it's never the same
as seeing yourself.
- The NTDS dump I mentioned is by using the operational dumpDatab
If they work, they are there, they are just not finding them.
Does the NET GROUP command work?
joe
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Sakari Kouti
Sent: Friday, September 09, 2005 9:19 AM
To: ActiveDir@mail.activedir.org
Subject: [Activ
g
Subject: RE: [ActiveDir] Create a group with a specified SID
Hi Jorge and Dean,
Answers and more description:
- I don't have personal access to the network in question, but I trust the
guys over there to give me quite correct information. Of course, it's never
the same as seeing yours
"listed/resolved in ACL editor".
I don't wat to be rude... but in this case I would want to see this with my own
eyes
Cheers
Jorge
From: [EMAIL PROTECTED] on behalf of Sakari Kouti
Sent: Fri 9/9/2005 5:45 PM
To: ActiveDir@mail.activedir.org
Subj
Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Sakari Kouti
Sent: Friday, September 09, 2005 11:45 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Create a group with a specified SID
Hi Jorge and Dean,
Answers and more description:
- I don
No, NET GROUP doesn't show the missing groups.
Yours, Sakari
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of joe
> Sent: Friday, September 09, 2005 6:46 PM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir
There is an offline thread about these mysterious missing groups. If something
comes up in the next few days, I'll let you know.
Yours, Sakari
List info : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%4
I'm really interested in hearing what the cause is of the missing groups.
Cheers
Jorge
From: [EMAIL PROTECTED] on behalf of Sakari Kouti
Sent: Fri 9/9/2005 11:50 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Create a group with a specifie
duction forest. Their RIDs wouldn't have been reused,
since the RIDs only could upward (and old RID will never be reused by
AD).
/Guido
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Sakari Kouti
Sent: Freitag, 9. September 2005 17:45
To: ActiveDi
Sakari wrote:
> > It seems that the groups are gone from the DCs but are still
> > cached in the member servers. But its funny that this caching
> > still applies after several weeks.
Guido wrote:
> there is no such thing as a group-membership-cache on
> member-servers so I highly doubt you're
Hi All,
Now I drove to the "missing group site" to see the things with my own eyes.
I found out a slight detail that affects the case :-). In addition to the three
WS2003 DCs, there were also some NT4 BDCs left. So the problem of where the
missing groups existed turned out to have quite an obvi
.
/Guido
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Sakari Kouti
Sent: Mittwoch, 14. September 2005 21:03
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Create a group with a specified SID
Hi All,
Now I drove to the "missing group
tombstone
> either and as such the PDCE would not remove the groups from the BDCs
> either.
>
> /Guido
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Sakari Kouti
> Sent: Mittwoch, 14. September 2005 21:03
> To: ActiveDi
15 matches
Mail list logo