• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 152
  • Last Modified:

Error in AD

Hi guys,

We have 2 DC with about 1000 users, 1000 groups, 1000 workstations and 1000 printers and maybe some few other AD objects...

Now we are trying to create some more domain local groups to replace the global groups or actually wanting to rename all the groups which is about 1000 global groups to domain local groups
but after creating about 300 domain local groups  we started getting some strange error message e.g "Not enough storage is available to complete this operation"

or is there a way to rename all this global groups to domain local groups??

cheers
0
agbor1960
Asked:
agbor1960
  • 5
  • 4
  • 2
2 Solutions
 
Pete LongConsultantCommented:
how big is the AD database?
0
 
Pete LongConsultantCommented:
in fact on reflection - Id say this is more an error on the machine than with active directory? thats a pretty general error, what does the event viewer say?
0
 
agbor1960Author Commented:
nothing in the event viewer.. that's serious which one should i check Directory services or application...
The servers have min. of 2GB of free space
0
Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

 
agbor1960Author Commented:
But when we create the groups just in our domain then no problem but when we add somebody from another domain that we just aquired then the error just keeps coming and you can't even remove the users any longer
because after clicking ok for the error message the members window is empty, though one just  added a couple of users...it actually only occurs when we add somebody from another domain...
but if we have less than 20 groups created, no problem but whenever we surpass the 300 mark then the problem emerges...


Tenks
0
 
Pete LongConsultantCommented:
Are you migrating them or just creating new ones?
0
 
agbor1960Author Commented:
Just creating new ones ...if possible change the old ones (global group) to domain local group...
Its there a microsoft tool for that???

Tenks
0
 
Pete LongConsultantCommented:
Quest software do a migration tools but its not free :(
0
 
agbor1960Author Commented:
No Microsoft??? what's name of the software and can it rename a global security group into a domain local group??
0
 
exx1976Commented:
Well, depending on how organized your AD is, you could use VBS to change all the group types without even having to touch them...

Use a for next loop on the OU that holds all your groups (your groups ARE in an OU all by themselves, right??) and modify the following property of the group:

groupType

The valid values for this property are as follows:

2 - Global Distribution Group
4 - Domain-Local Distribution Group
8 - Universal Distribution Group
-2147483646 - Global Security Group
-2147483644 - Domain-Local Security Group
-2147483640 - Universal Security Group


HTH,
exx1976
0
 
Pete LongConsultantCommented:
Points for exx1976
0
 
exx1976Commented:
Sounds good to me.   :)   Thanks, Pete.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 5
  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now