RE: [ActiveDir] Create a group with a specified SID

2005-09-09 Thread Almeida Pinto, Jorge de
Hi Sakari, I assume you searched all possible containers and OUs for the groups. You say access is still possible through the groups, so IMHO they MUST still exist somehow/somewhere. If you login at a client using a user account that is member of missing groups and then use WHOAMI or SECTOK f

RE: [ActiveDir] Create a group with a specified SID

2005-09-09 Thread Dean Wells
You mention that this is a case you were told about, I take it you've not confirmed what you're being told? That aside, when you say NTDS dump, specifically what are you referring to? -- Dean Wells MSEtechnology * Email: [EMAIL PROTECTED] http://msetechnology.com -Original Message- From

RE: [ActiveDir] Create a group with a specified SID

2005-09-09 Thread Sakari Kouti
Hi Jorge and Dean, Answers and more description: - I don't have personal access to the network in question, but I trust the guys over there to give me quite correct information. Of course, it's never the same as seeing yourself. - The NTDS dump I mentioned is by using the operational dumpDatab

RE: [ActiveDir] Create a group with a specified SID

2005-09-09 Thread joe
If they work, they are there, they are just not finding them. Does the NET GROUP command work? joe -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sakari Kouti Sent: Friday, September 09, 2005 9:19 AM To: ActiveDir@mail.activedir.org Subject: [Activ

RE: [ActiveDir] Create a group with a specified SID

2005-09-09 Thread Dean Wells
g Subject: RE: [ActiveDir] Create a group with a specified SID Hi Jorge and Dean, Answers and more description: - I don't have personal access to the network in question, but I trust the guys over there to give me quite correct information. Of course, it's never the same as seeing yours

RE: [ActiveDir] Create a group with a specified SID

2005-09-09 Thread Almeida Pinto, Jorge de
"listed/resolved in ACL editor". I don't wat to be rude... but in this case I would want to see this with my own eyes Cheers Jorge From: [EMAIL PROTECTED] on behalf of Sakari Kouti Sent: Fri 9/9/2005 5:45 PM To: ActiveDir@mail.activedir.org Subj

RE: [ActiveDir] Create a group with a specified SID

2005-09-09 Thread joe
Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sakari Kouti Sent: Friday, September 09, 2005 11:45 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Create a group with a specified SID Hi Jorge and Dean, Answers and more description: - I don

RE: [ActiveDir] Create a group with a specified SID

2005-09-09 Thread Sakari Kouti
No, NET GROUP doesn't show the missing groups. Yours, Sakari > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of joe > Sent: Friday, September 09, 2005 6:46 PM > To: ActiveDir@mail.activedir.org > Subject: RE: [ActiveDir

RE: [ActiveDir] Create a group with a specified SID

2005-09-09 Thread Sakari Kouti
There is an offline thread about these mysterious missing groups. If something comes up in the next few days, I'll let you know. Yours, Sakari List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%4

RE: [ActiveDir] Create a group with a specified SID

2005-09-09 Thread Almeida Pinto, Jorge de
I'm really interested in hearing what the cause is of the missing groups. Cheers Jorge From: [EMAIL PROTECTED] on behalf of Sakari Kouti Sent: Fri 9/9/2005 11:50 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Create a group with a specifie

RE: [ActiveDir] Create a group with a specified SID

2005-09-10 Thread Grillenmeier, Guido
duction forest. Their RIDs wouldn't have been reused, since the RIDs only could upward (and old RID will never be reused by AD). /Guido -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sakari Kouti Sent: Freitag, 9. September 2005 17:45 To: ActiveDi

RE: [ActiveDir] Create a group with a specified SID

2005-09-14 Thread Sakari Kouti
Sakari wrote: > > It seems that the groups are gone from the DCs but are still > > cached in the member servers. But its funny that this caching > > still applies after several weeks. Guido wrote: > there is no such thing as a group-membership-cache on > member-servers so I highly doubt you're

RE: [ActiveDir] Create a group with a specified SID

2005-09-14 Thread Sakari Kouti
Hi All, Now I drove to the "missing group site" to see the things with my own eyes. I found out a slight detail that affects the case :-). In addition to the three WS2003 DCs, there were also some NT4 BDCs left. So the problem of where the missing groups existed turned out to have quite an obvi

RE: [ActiveDir] Create a group with a specified SID

2005-09-14 Thread Grillenmeier, Guido
. /Guido -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sakari Kouti Sent: Mittwoch, 14. September 2005 21:03 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Create a group with a specified SID Hi All, Now I drove to the "missing group

RE: [ActiveDir] Create a group with a specified SID

2005-09-15 Thread Sakari Kouti
tombstone > either and as such the PDCE would not remove the groups from the BDCs > either. > > /Guido > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Sakari Kouti > Sent: Mittwoch, 14. September 2005 21:03 > To: ActiveDi