Turns out its tied to my account, although I'm a member of Domain Admins, Enterprise Admins, Schema Admins, Exchange Full Admins and others. Most puzzling. I really don't want to have to nuke my account and start with a fresh one.
From: Michael B. Smith [mailto:[email protected]] Sent: Thursday, March 31, 2011 6:50 AM To: NT System Admin Issues Subject: RE: Group Enumeration Issue Dcdiag and netdiag. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Phil Hershey [mailto:[email protected]] Sent: Wednesday, March 30, 2011 3:26 PM To: NT System Admin Issues Subject: RE: Group Enumeration Issue Tried promoting from global to universal, but it didn't help we apparently have bigger AD issues, symptoms of which are starting to bubble up. No events in security event log, although the Default Domain Controller audit policy clearly as logon events, account logon events and other items set to monitor both successful and failed events. (Tried to reply multiple times this morning, but kept being rejected by the list server for send an attachment, although there was never one.) From: Michael B. Smith [mailto:[email protected]] Sent: Tuesday, March 29, 2011 2:53 PM To: NT System Admin Issues Subject: RE: Group Enumeration Issue Promote it. Sent from my HTC Tilt 2, a Windows phone from AT&T ________________________________ From: Phil Hershey <[email protected]> Sent: Tuesday, March 29, 2011 5:27 PM To: NT System Admin Issues <[email protected]> Subject: RE: Group Enumeration Issue Hi, Michael. Global distribution. From: Michael B. Smith [mailto:[email protected]] Sent: Tuesday, March 29, 2011 2:23 PM To: NT System Admin Issues Subject: RE: Group Enumeration Issue What kind of group? Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Phil Hershey [mailto:[email protected]] Sent: Tuesday, March 29, 2011 4:59 PM To: NT System Admin Issues Subject: Group Enumeration Issue Odd problem that has just cropped up. Domain with 4 DC's in 2 sites that are T3 connected, only about 350 users, native 2003 mode. We have a problem with resolving the members of a single one of our ~100 distribution groups. The server that holds all but one of the FSMO roles correctly shows all the member groups and users for this DL. If I go to the Members tab for this DL on any of the other DCs, the members box is empty. However if you try and add one of the groups or users that is actually already in this DL, you get a 'account name is already a member of the local group' error. REPLMON shows all successful replications, and a REPADMIN /syncall DC /force all shows completion without errors. Seems like we've got a problem with versioning on the DCs. They're all Server 2003 32-bit Std Edition and fully patched. Any ideas? Thanks. Phil Hershey MCSE 2003: Security | MCITP - Enterprise Messaging Admin 2010 AGIA Insurance Services ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
