Solved

AD Security Groups Don't Display Members

Posted on 2008-10-22
3
440 Views
Last Modified: 2008-10-28
I just took over a new company with a 2003 Active Directory domain. I'm trying to clean up their Active Directory structure and I found a weird quirk. If I open the properties of a Security Group, it doesn't list the members. If I open the properties of a user, it will show me what group they are a member of.  But if I create a new group, it works normally. Any help on correcting this would be appreciated.
0
Comment
Question by:NetworkSolutions
  • 2
3 Comments
 
LVL 12

Expert Comment

by:RobinHuman
ID: 22781253
In the ADUC, in the actions menu (at the top) make sure that advanced options is set.
0
 

Author Comment

by:NetworkSolutions
ID: 22781329
Advanced Features was not checked, is now, and still doesn't work.
0
 

Accepted Solution

by:
NetworkSolutions earned 0 total points
ID: 22786280
I figured it out myself. When I clicked on the Permissions tab of the group's properties, I got this error:

Windows can not edit the permissions on 'Group Name' because they have been written in a nonstandard format by another application. To enable editing, you must use the application to restore the permissions to a standard format.

I Googled the error, which led me here:
http://windowsitpro.com/article/articleid/74811/jsi-tip-3493-windows-can-not-edit-the-permissions-on-group-name-because-they-have-been-written-in-a-nonstandard-format.html

Which then led me here:
http://support.microsoft.com/?kbid=253827

After reading both articles, I simply logged on to my Exchange server, went into ADUC, right clicked on the group, Chose Exchange Tasks, and then unhid Group membership.
Simple.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Mapping Drives using Group policy preferences Are you still using old scripts to map your network drives if so this article will show you how to get away for old scripts and move toward Group Policy Preference for mapping them. First things f…
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

25 Experts available now in Live!

Get 1:1 Help Now