Problems to Add users to group

[Douglas Silva]

Hello,

We have and environment with Windows 2000 servers where some user's have
special permissions on groups to add and remove members. ADUC is published
under Citrix for that users, currently one of those users is having trouble
when trying to add or remove group members, the following error message
appears:

Picker cannot open because it cannot determine whether
weleudc2.we.interbrew.net is joined to a domain"

weleudc2 is the domain controller

If user closes the error message and then click on add button again, the
message does not appear and he can continue working normally.

I have tried the same operation with my account and the problem does not
happens, have also forced AD to user another domain controller.

I have noticed that the following error appears on DC security log:

Eventid: 565
Source: Directory Service Access
Type: Failure
Description:
Object Open:
Object Server: DS
Object Type: %{00000000-0000-0000-0000-000000000000}
Object Name: OU=File Shares,OU=User Managed Groups,OU=User
Groups,OU=Groups,OU=WE1 Region,DC=we,DC=interbrew,DC=net
New Handle ID: -
Operation ID: {0,899513655}
Process ID: 316
Primary User Name: WELEUDC2$
Primary Domain: WEINTERBREW
Primary Logon ID: (0x0,0x3E7)
Client User Name: TAP
Client Domain: WEINTERBREW
Client Logon ID: (0x0,0x3599C3D4)
Accesses Create Child


Already took a look at:
http://support.microsoft.com/kb/816818
but this does not help

Any comments will be appreciated.

Thanks.

Douglas

 

[Meinolf Weber]

Hello Douglas,

Have a look here:
http://support.microsoft.com/kb/816818

http://support.microsoft.com/kb/309353

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm

 

[Douglas Silva]

Thanks Meinolf but that did not help, in my case user is not modifying NTFS
permissios but adding a member to a group.

Regards,
Douglas

 

[Douglas Silva]

I have resolved the problem after swithing the domain name from NETBIOS to
DNS FQDN under citrix logon account information.

Thx all