Re: A/D Integrity

Hi
Sounds like you have your DFL at 2000 mixed, please check that.

--
I hope that the information above helps you

Good Luck
Jorge Silva
MCSA
Systems Administrator
"bob britton" <rbritton@xxxxxxxxxxxx> wrote in message
news:OUeq2cW8GHA.5020@xxxxxxxxxxxxxxxxxxxxxxx
How do i check the integrity of our Active Directory on W2k3 Enterprise?

We have a single DC running with about 500+ users.

There are very strange things going on. For example: I have a group called
Executive Team (Domain Global). When I try to add this group to another
Domain Global Group, it can't find it.

When i go into my Executive Team group (domain global), click on Member
Of, and try to add the name of the other Domain Global group, it can't
find that group.

Yet when I right click on the root of the forest and hit 'find' and type
in the name of any of the Domain Global Groups, it finds them.

So how do I check that A/D is ok, that the security descriptors are Ok.

By OK, I mean, how do i troubleshoot that my A/D has a high-level of
integrity?



.

Relevant Pages

  • A/D Integrity
    ... How do i check the integrity of our Active Directory on W2k3 Enterprise? ... Domain Global Group, it can't find it. ... When i go into my Executive Team group, click on Member Of, ... So how do I check that A/D is ok, that the security descriptors are Ok. ...
    (microsoft.public.windows.server.active_directory)
  • Re: A/D Integrity
    ... nested groups are limited in W2k Mixed. ... When i go into my Executive Team group, ... Of, and try to add the name of the other Domain Global group, it can't ... So how do I check that A/D is ok, that the security descriptors are Ok. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group Types Question
    ... We have two A/D accounts ... The Domain global group of users was NOT being granted access. ... It was by testing of alternative group memberships that ...
    (microsoft.public.windows.server.active_directory)