List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

When subscribed to the list you should use your standard email client to send your posts to ActiveDir@mail.activedir.org.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: Re: [ActiveDir] Where are the Schema admins and Enterprise admins Groups?

Prev Next

You are not authorized to post a reply.

Author

Messages

NilsK

Posts:105

08/13/2010 9:01 AM
Er ... I'm not quite sure if I understood you. If you have a single domain environment all DCs share the same data. In a single domain there is no "root DC". In that case any authenticated user should see the groups regardless of what DC they query (even in multiple sites). So I hope that you do run a forest with multiple domains and that your sub-admin originally queried a subdomain. Otherwise you should check your AD health status. Nils ----- Ursprüngliche Nachricht ----- Von: Mohan Ravindran Gesendet: 13.08.10 09:46 Uhr An: activedir@mail.activedir.org Betreff: Re: [ActiveDir] Where are the Schema admins and Enterprise admins Groups? Hi Nils, Thankyou. It is a single domain environment. As u said, i'm connected to the root domain and he is connected to one of the domain controller which is in his site. That's why he is unable to see that. Now i asked him to connect to this root DC and he is able to see the groups. This is great! Thanks a lot again. On Fri, Aug 13, 2010 at 2:30 AM, Nils Kaczenski < n.ka@gmx.de > wrote: Those objects are not hidden. By default, permissions are set equally to any other object so Auth Users should be able to see the objects. Do you run a multi-domain environment? The groups we are talking about are forest-level Universal Groups that are stored in the root domain. So if your remote admin has a subdomain he will not find the objects there. BTW the "Builtin" container is not the place to look as it stores only DC-local groups by default. All groups there are only valid on DCs but not throughout the domain. Nils ----- Ursprüngliche Nachricht ----- Von: Mohan Ravindran Gesendet: 13.08.10 09:24 Uhr An: activedir Betreff: [ActiveDir] Where are the Schema admins and Enterprise admins Groups? Hi Team, One of the admin in our remote office says that, he is not able to see Schema admins and Enterprise admins groups in any containers.( builtin & USERS) Im the one who promote DC's in my domain and I'm able to see those groups in Users container but not in builtin. Why? Is this hidden? -- Regards, Mohan R Level2-Server support Engineer. www.kaczenski.de http://www.kaczenski.de/ MVP Windows Server .: www.faq-o-matic.net http://www.faq-o-matic.net/ : Die technische Community :. .: Twitter: http://twitter.com/Kaczenski http://twitter.com/Kaczenski :. .: MVP-Profil: https://mvp.support.microsoft.com/profile/Nils.Kaczenski https://mvp.support.microsoft.com/profile/Nils.Kaczenski :. -- Regards, Mohan R Level2-Server support Engineer. www.kaczenski.de MVP Windows Server .: www.faq-o-matic.net: Die technische Community :. .: Twitter: http://twitter.com/Kaczenski :. .: MVP-Profil: https://mvp.support.microsoft.com/profile/Nils.Kaczenski :.

You are not authorized to post a reply.

Forums >ActiveDir Mail List Archive >List Archives > Re: [ActiveDir] Where are the Schema admins and Enterprise admins Groups?

ActiveForums 3.7

Syndicate

Friends

List Archives

List Archives

Friends

Members

Articles

Related Links

Ads