Error in AD

Hi guys,

We have 2 DC with about 1000 users, 1000 groups, 1000 workstations and 1000 printers and maybe some few other AD objects...

Now we are trying to create some more domain local groups to replace the global groups or actually wanting to rename all the groups which is about 1000 global groups to domain local groups
but after creating about 300 domain local groups  we started getting some strange error message e.g "Not enough storage is available to complete this operation"

or is there a way to rename all this global groups to domain local groups??

cheers
agbor1960Asked:
Who is Participating?
 
exx1976Connect With a Mentor Commented:
Well, depending on how organized your AD is, you could use VBS to change all the group types without even having to touch them...

Use a for next loop on the OU that holds all your groups (your groups ARE in an OU all by themselves, right??) and modify the following property of the group:

groupType

The valid values for this property are as follows:

2 - Global Distribution Group
4 - Domain-Local Distribution Group
8 - Universal Distribution Group
-2147483646 - Global Security Group
-2147483644 - Domain-Local Security Group
-2147483640 - Universal Security Group


HTH,
exx1976
0
 
Pete LongTechnical ConsultantCommented:
how big is the AD database?
0
 
Pete LongTechnical ConsultantCommented:
in fact on reflection - Id say this is more an error on the machine than with active directory? thats a pretty general error, what does the event viewer say?
0
Cloud Class® Course: Certified Penetration Testing

This CPTE Certified Penetration Testing Engineer course covers everything you need to know about becoming a Certified Penetration Testing Engineer. Career Path: Professional roles include Ethical Hackers, Security Consultants, System Administrators, and Chief Security Officers.

 
agbor1960Author Commented:
nothing in the event viewer.. that's serious which one should i check Directory services or application...
The servers have min. of 2GB of free space
0
 
agbor1960Author Commented:
But when we create the groups just in our domain then no problem but when we add somebody from another domain that we just aquired then the error just keeps coming and you can't even remove the users any longer
because after clicking ok for the error message the members window is empty, though one just  added a couple of users...it actually only occurs when we add somebody from another domain...
but if we have less than 20 groups created, no problem but whenever we surpass the 300 mark then the problem emerges...


Tenks
0
 
Pete LongTechnical ConsultantCommented:
Are you migrating them or just creating new ones?
0
 
agbor1960Author Commented:
Just creating new ones ...if possible change the old ones (global group) to domain local group...
Its there a microsoft tool for that???

Tenks
0
 
Pete LongConnect With a Mentor Technical ConsultantCommented:
Quest software do a migration tools but its not free :(
0
 
agbor1960Author Commented:
No Microsoft??? what's name of the software and can it rename a global security group into a domain local group??
0
 
Pete LongTechnical ConsultantCommented:
Points for exx1976
0
 
exx1976Commented:
Sounds good to me.   :)   Thanks, Pete.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.