Solved

Error in AD

Posted on 2004-08-23
12
142 Views
Last Modified: 2010-04-14
Hi guys,

We have 2 DC with about 1000 users, 1000 groups, 1000 workstations and 1000 printers and maybe some few other AD objects...

Now we are trying to create some more domain local groups to replace the global groups or actually wanting to rename all the groups which is about 1000 global groups to domain local groups
but after creating about 300 domain local groups  we started getting some strange error message e.g "Not enough storage is available to complete this operation"

or is there a way to rename all this global groups to domain local groups??

cheers
0
Comment
Question by:agbor1960
  • 5
  • 4
  • 2
12 Comments
 
LVL 57

Expert Comment

by:Pete Long
ID: 11871454
how big is the AD database?
0
 
LVL 57

Expert Comment

by:Pete Long
ID: 11871494
in fact on reflection - Id say this is more an error on the machine than with active directory? thats a pretty general error, what does the event viewer say?
0
 

Author Comment

by:agbor1960
ID: 11871631
nothing in the event viewer.. that's serious which one should i check Directory services or application...
The servers have min. of 2GB of free space
0
Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 

Author Comment

by:agbor1960
ID: 11871709
But when we create the groups just in our domain then no problem but when we add somebody from another domain that we just aquired then the error just keeps coming and you can't even remove the users any longer
because after clicking ok for the error message the members window is empty, though one just  added a couple of users...it actually only occurs when we add somebody from another domain...
but if we have less than 20 groups created, no problem but whenever we surpass the 300 mark then the problem emerges...


Tenks
0
 
LVL 57

Expert Comment

by:Pete Long
ID: 11873550
Are you migrating them or just creating new ones?
0
 

Author Comment

by:agbor1960
ID: 11875120
Just creating new ones ...if possible change the old ones (global group) to domain local group...
Its there a microsoft tool for that???

Tenks
0
 
LVL 57

Assisted Solution

by:Pete Long
Pete Long earned 100 total points
ID: 11875375
Quest software do a migration tools but its not free :(
0
 

Author Comment

by:agbor1960
ID: 11875588
No Microsoft??? what's name of the software and can it rename a global security group into a domain local group??
0
 
LVL 18

Accepted Solution

by:
exx1976 earned 400 total points
ID: 11908856
Well, depending on how organized your AD is, you could use VBS to change all the group types without even having to touch them...

Use a for next loop on the OU that holds all your groups (your groups ARE in an OU all by themselves, right??) and modify the following property of the group:

groupType

The valid values for this property are as follows:

2 - Global Distribution Group
4 - Domain-Local Distribution Group
8 - Universal Distribution Group
-2147483646 - Global Security Group
-2147483644 - Domain-Local Security Group
-2147483640 - Universal Security Group


HTH,
exx1976
0
 
LVL 57

Expert Comment

by:Pete Long
ID: 12326613
Points for exx1976
0
 
LVL 18

Expert Comment

by:exx1976
ID: 12333100
Sounds good to me.   :)   Thanks, Pete.
0

Featured Post

Live: Real-Time Solutions, Start Here

Receive instant 1:1 support from technology experts, using our real-time conversation and whiteboard interface. Your first 5 minutes are always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Changing MS Windows 2003 Server product key 6 327
Server Hard Drive Expansion 2 153
Adprep 12 73
Pskill not working on VBS script 4 153
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
One of the biggest threats in the cyber realm pertains to advanced persistent threats (APTs). This paper is a compare and contrast of Russian and Chinese APT's.
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question