Hello,
We have and environment with Windows 2000 servers where some user's have
special permissions on groups to add and remove members. ADUC is published
under Citrix for that users, currently one of those users is having trouble
when trying to add or remove group members, the following error message
appears:
Picker cannot open because it cannot determine whether
weleudc2.we.interbrew.net is joined to a domain"
weleudc2 is the domain controller
If user closes the error message and then click on add button again, the
message does not appear and he can continue working normally.
I have tried the same operation with my account and the problem does not
happens, have also forced AD to user another domain controller.
I have noticed that the following error appears on DC security log:
Eventid: 565
Source: Directory Service Access
Type: Failure
Description:
Object Open:
Object Server: DS
Object Type: %{00000000-0000-0000-0000-000000000000}
Object Name: OU=File Shares,OU=User Managed Groups,OU=User
Groups,OU=Groups,OU=WE1 Region,DC=we,DC=interbrew,DC=net
New Handle ID: -
Operation ID: {0,899513655}
Process ID: 316
Primary User Name: WELEUDC2$
Primary Domain: WEINTERBREW
Primary Logon ID: (0x0,0x3E7)
Client User Name: TAP
Client Domain: WEINTERBREW
Client Logon ID: (0x0,0x3599C3D4)
Accesses Create Child
Already took a look at:
http://support.microsoft.com/kb/816818
but this does not help
Any comments will be appreciated.
Thanks.
Douglas