Problems to Add users to group


Douglas Silva


We have and environment with Windows 2000 servers where some user's have
special permissions on groups to add and remove members. ADUC is published
under Citrix for that users, currently one of those users is having trouble
when trying to add or remove group members, the following error message

Picker cannot open because it cannot determine whether is joined to a domain"

weleudc2 is the domain controller

If user closes the error message and then click on add button again, the
message does not appear and he can continue working normally.

I have tried the same operation with my account and the problem does not
happens, have also forced AD to user another domain controller.

I have noticed that the following error appears on DC security log:

Eventid: 565
Source: Directory Service Access
Type: Failure
Object Open:
Object Server: DS
Object Type: %{00000000-0000-0000-0000-000000000000}
Object Name: OU=File Shares,OU=User Managed Groups,OU=User
Groups,OU=Groups,OU=WE1 Region,DC=we,DC=interbrew,DC=net
New Handle ID: -
Operation ID: {0,899513655}
Process ID: 316
Primary User Name: WELEUDC2$
Primary Domain: WEINTERBREW
Primary Logon ID: (0x0,0x3E7)
Client User Name: TAP
Client Domain: WEINTERBREW
Client Logon ID: (0x0,0x3599C3D4)
Accesses Create Child

Already took a look at:
but this does not help

Any comments will be appreciated.



Douglas Silva

Thanks Meinolf but that did not help, in my case user is not modifying NTFS
permissios but adding a member to a group.


Douglas Silva

I have resolved the problem after swithing the domain name from NETBIOS to
DNS FQDN under citrix logon account information.

Thx all

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question