Security groups in Active directory not applying after de promoting a domain controller

[Simon]

Hi,

We had two domain controllers with Windows 2000 server. We decided to
de promote one by using dcpromo. This process worked fine, how ever
when we create a group in active directory. If we create a new group
in active directory and add members to that group. When accessing a
folder with that group in the permissions we get the error: Access
Denied.

However if we were to add the user, it works fine!!

I'm assuming this is to do with the de promoting of a server, however
we've not added a group for a while so it may be caused by something
else.

Any help would great!!!

Simon

 

[Andrei Ungureanu]

hhmmm.... Have you tried to log on and off the user after you have modified
the group membership??

 

[Simon]

Yeah, we've done that. Its been like it for a couple of days. So we've
given it time to update the settings. We've even restarted our other
domain controller to see that would have effect. Nothing!!!

 

[Cary Shultz [A.D. MVP]]

Simon,

Are you having any replication issues? Have you looked at repadmin
/showconn and repadmin /showreps as well as replmon? How about dcdiag /c /v
and netdiag /v? All these tools are from the Support Tools that you can get
from the WIN2000 Service Pack CD or from the microsoft web site.

HTH,

Cary

 

[Simon]

Ok,

We may be getting somewhere. When I ran repadmin /showreps I got the following:

==== INBOUND NEIGHBORS ======================================

CN=Schema,CN=Configuration,DC=its,DC=co,DC=uk
Default-First-Site-Name\ITS_SQL1 (deleted DSA) via RPC
objectGuid: 669b0b10-8a62-4771-a394-ea8085d0a257

CN=Configuration,DC=its,DC=co,DC=uk
Default-First-Site-Name\ITS_SQL1 (deleted DSA) via RPC
objectGuid: 669b0b10-8a62-4771-a394-ea8085d0a257

DC=its,DC=co,DC=uk
Default-First-Site-Name\ITS_SQL1 (deleted DSA) via RPC
objectGuid: 669b0b10-8a62-4771-a394-ea8085d0a257

This seems to be referring to the old server?? Is this ok? How do we get rid of it?

 

[Andrei Ungureanu]

ITS_SQL1 was deleted?
How was deleted?


--
Andrei Ungureanu
www.eventid.net
Free Windows event logs reports
http://www.altairtech.ca/evlog/

 

[Simon]

Thanks for the replys, i've been away on holiday.

The problem seems to of sorted its self out. Typical Microsoft!!!

Thanks anyay for your time and assistance