Problems to Add users to group

  • Thread starter Thread starter Douglas Silva
  • Start date Start date
D

Douglas Silva

Hello,

We have and environment with Windows 2000 servers where some user's have
special permissions on groups to add and remove members. ADUC is published
under Citrix for that users, currently one of those users is having trouble
when trying to add or remove group members, the following error message
appears:

Picker cannot open because it cannot determine whether
weleudc2.we.interbrew.net is joined to a domain"

weleudc2 is the domain controller

If user closes the error message and then click on add button again, the
message does not appear and he can continue working normally.

I have tried the same operation with my account and the problem does not
happens, have also forced AD to user another domain controller.

I have noticed that the following error appears on DC security log:

Eventid: 565
Source: Directory Service Access
Type: Failure
Description:
Object Open:
Object Server: DS
Object Type: %{00000000-0000-0000-0000-000000000000}
Object Name: OU=File Shares,OU=User Managed Groups,OU=User
Groups,OU=Groups,OU=WE1 Region,DC=we,DC=interbrew,DC=net
New Handle ID: -
Operation ID: {0,899513655}
Process ID: 316
Primary User Name: WELEUDC2$
Primary Domain: WEINTERBREW
Primary Logon ID: (0x0,0x3E7)
Client User Name: TAP
Client Domain: WEINTERBREW
Client Logon ID: (0x0,0x3599C3D4)
Accesses Create Child


Already took a look at:
http://support.microsoft.com/kb/816818
but this does not help

Any comments will be appreciated.

Thanks.

Douglas
 
Thanks Meinolf but that did not help, in my case user is not modifying NTFS
permissios but adding a member to a group.

Regards,
Douglas
 
I have resolved the problem after swithing the domain name from NETBIOS to
DNS FQDN under citrix logon account information.

Thx all
 
Back
Top