Re: A/D Integrity

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Well, that was it.

The Domain was in W2K Mixed. I saw from the technical documentation that
nested groups are limited in W2k Mixed.

Thanks guys! Problem area identified at least!

"bob britton" <rbritton@xxxxxxxxxxxx> wrote in message
news:OUeq2cW8GHA.5020@xxxxxxxxxxxxxxxxxxxxxxx
How do i check the integrity of our Active Directory on W2k3 Enterprise?

We have a single DC running with about 500+ users.

There are very strange things going on. For example: I have a group called
Executive Team (Domain Global). When I try to add this group to another
Domain Global Group, it can't find it.

When i go into my Executive Team group (domain global), click on Member
Of, and try to add the name of the other Domain Global group, it can't
find that group.

Yet when I right click on the root of the forest and hit 'find' and type
in the name of any of the Domain Global Groups, it finds them.

So how do I check that A/D is ok, that the security descriptors are Ok.

By OK, I mean, how do i troubleshoot that my A/D has a high-level of
integrity?



.