AD and GroupMembershipSAM



I'm trying to install IBM MQ 5.3 on Windows 2003. From the READ.ME of
that software:

To set Read GroupMembershipSAM:

1.Open Active Directory Users & Computers
2.Put Active Directory Users & Computers in Advanced Features Mode
3.Find the 'domain mqm' in the left panel, right click it and select
4.Select the Security Tab.
5.Select Advanced, then click Add, type in 'domain mqm' and click OK.
6.A new dialog will be displayed. Select the properties Tab. In the
'Apply onto' box change the view to 'User objects'.
7.Select the allow checkbox for 'Read Group Membership' and 'Read
8.Click 'OK' to close all windows (Should be 3 times).

The 'domain mqm' group now has the rights to enumerate the group
membership for
all users in that domain

The problem is that when I don't see the options 'Read Group
Membership' and 'Read GroupMembershipSAM' under the 'User Objects'

Any idea why? and Idea hoe to set those options?.

Thanks a lot

Gary Simmons


In order to access these attributes you will need to modify the
filtering settings on the AD Users & Computers mmc.. This controls
which attributes are visible..

See the following MS link for a proper explaination....

Gary Simmons

(e-mail address removed)

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question