Unix Attribute Tab in AD fails unless domain admin
Posted on 2015-02-10
I am having trouble assigning non domain admin accounts permission to alter attributes in the Unix tab for any user account.
Generic error is:
Unable to update the maximum user ID number for the selected NIS Domain
then after clicking OK you get:
Unable to modify the object property values.
Check your credentials
There could be a network problem
Active Directory Domain Services could be down
Contact your system administrator
The articles on the web say add full control to ypserv30.
ypserv30 - the group has full control of the folder and all child objects.
We are running 2003 DFL/FFL and I do have MS Identity Management for Unix installed on one of the 2008r2 domain controllers.
Does the group also need full control of defaultmigrationcontainer30? or is there something else to check..
thanks in advance...