Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Users appear dithered in Global Group, 2003 Fun level
Users appear dithered in Global Group, 2003 Fun level [message #395486] Fri, 19 February 2010 15:19 Go to next message
doc_king  is currently offline doc_king
Messages: 4
Registered: August 2009
Junior Member
I have an odd situation. I'm troubleshooting a permission issue with our
provisioning team, they are unable to unlock accounts in AD. They are nested
members of the account operators group which technically should give them
this access, however, we have about 250 members in the provisioning team
group and they appear dithered- they are a different color, much lighter than
the usual user icon in AD 2003 Functional domain/forest. The technical
library mentions the group limit being in the millions.

I've never seen this before- any ideas?
--
-Chris
Re: Users appear dithered in Global Group, 2003 Fun level [message #395881 is a reply to message #395486] Sat, 20 February 2010 04:19 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello doc_king,

See here about the unlock account permissions and see if this is configured
for your accounts in question:
http://support.microsoft.com/kb/294952/en-us

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I have an odd situation. I'm troubleshooting a permission issue with
> our provisioning team, they are unable to unlock accounts in AD. They
> are nested members of the account operators group which technically
> should give them this access, however, we have about 250 members in
> the provisioning team group and they appear dithered- they are a
> different color, much lighter than the usual user icon in AD 2003
> Functional domain/forest. The technical library mentions the group
> limit being in the millions.
>
> I've never seen this before- any ideas?
>
Re: Users appear dithered in Global Group, 2003 Fun level [message #395972 is a reply to message #395486] Sat, 20 February 2010 08:59 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"doc_king" <docking@discussions.microsoft.com> wrote in message
news:EF16C2E7-5991-4A0B-A08B-965164659172@microsoft.com...
>I have an odd situation. I'm troubleshooting a permission issue with our
> provisioning team, they are unable to unlock accounts in AD. They are
> nested
> members of the account operators group which technically should give them
> this access, however, we have about 250 members in the provisioning team
> group and they appear dithered- they are a different color, much lighter
> than
> the usual user icon in AD 2003 Functional domain/forest. The technical
> library mentions the group limit being in the millions.
>
> I've never seen this before- any ideas?
> --
> -Chris


In addition to Meinolf's link, you may want to take a look at the following
link. I realize you said there are 250, and not 500, but it's worth a look.

Hair color of the "person" icon for a user group becomes gray if the group
contains more than 500 users:
http://support.microsoft.com/?kbid=281923


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE &
MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services

If you feel this is an urgent issue and require immediate assistance, please
contact Microsoft PSS directly. Please check http://support.microsoft.com
for regional support phone numbers.
Re: Users appear dithered in Global Group, 2003 Fun level [message #397625 is a reply to message #395972] Mon, 22 February 2010 16:43 Go to previous messageGo to next message
doc_king  is currently offline doc_king
Messages: 4
Registered: August 2009
Junior Member
Ace and Meinolf,

You guys are both wizards! That is exactly what is going on, I
double-checked my group membership with dsget/dsquery and I have 585 users. I
will also need to correctly delegate unlock permissions (actually ensure it
was done properly). In case anyone hasn't told you lately, you provide an
invalulable service that is greatly apprecaited. Thank you very much for your
help.

-Chris


"Ace Fekay [MVP-DS, MCT]" wrote:

> "doc_king" <docking@discussions.microsoft.com> wrote in message
> news:EF16C2E7-5991-4A0B-A08B-965164659172@microsoft.com...
> >I have an odd situation. I'm troubleshooting a permission issue with our
> > provisioning team, they are unable to unlock accounts in AD. They are
> > nested
> > members of the account operators group which technically should give them
> > this access, however, we have about 250 members in the provisioning team
> > group and they appear dithered- they are a different color, much lighter
> > than
> > the usual user icon in AD 2003 Functional domain/forest. The technical
> > library mentions the group limit being in the millions.
> >
> > I've never seen this before- any ideas?
> > --
> > -Chris
>
>
> In addition to Meinolf's link, you may want to take a look at the following
> link. I realize you said there are 250, and not 500, but it's worth a look.
>
> Hair color of the "person" icon for a user group becomes gray if the group
> contains more than 500 users:
> http://support.microsoft.com/?kbid=281923
>
>
> --
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Please reply back to the newsgroup or forum for collaboration benefit among
> responding engineers, and to help others benefit from your resolution.
>
> Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE &
> MCSA 2003/2000, MCSA Messaging 2003
> Microsoft Certified Trainer
> Microsoft MVP - Directory Services
>
> If you feel this is an urgent issue and require immediate assistance, please
> contact Microsoft PSS directly. Please check http://support.microsoft.com
> for regional support phone numbers.
>
>
> .
>
Re: Users appear dithered in Global Group, 2003 Fun level [message #397631 is a reply to message #397625] Mon, 22 February 2010 16:51 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello doc_king,

Thank you very much, glad to help. :-)

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Ace and Meinolf,
>
> You guys are both wizards! That is exactly what is going on, I
> double-checked my group membership with dsget/dsquery and I have 585
> users. I will also need to correctly delegate unlock permissions
> (actually ensure it was done properly). In case anyone hasn't told you
> lately, you provide an invalulable service that is greatly
> apprecaited. Thank you very much for your help.
>
> -Chris
>
> "Ace Fekay [MVP-DS, MCT]" wrote:
>
>> "doc_king" <docking@discussions.microsoft.com> wrote in message
>> news:EF16C2E7-5991-4A0B-A08B-965164659172@microsoft.com...
>>
>>> I have an odd situation. I'm troubleshooting a permission issue with
>>> our
>>> provisioning team, they are unable to unlock accounts in AD. They
>>> are
>>> nested
>>> members of the account operators group which technically should give
>>> them
>>> this access, however, we have about 250 members in the provisioning
>>> team
>>> group and they appear dithered- they are a different color, much
>>> lighter
>>> than
>>> the usual user icon in AD 2003 Functional domain/forest. The
>>> technical
>>> library mentions the group limit being in the millions.
>>> I've never seen this before- any ideas?
>>> --
>>> -Chris
>> In addition to Meinolf's link, you may want to take a look at the
>> following link. I realize you said there are 250, and not 500, but
>> it's worth a look.
>>
>> Hair color of the "person" icon for a user group becomes gray if the
>> group
>> contains more than 500 users:
>> http://support.microsoft.com/?kbid=281923
>> -- Ace
>>
>> This posting is provided "AS-IS" with no warranties or guarantees and
>> confers no rights.
>>
>> Please reply back to the newsgroup or forum for collaboration benefit
>> among responding engineers, and to help others benefit from your
>> resolution.
>>
>> Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007,
>> MCSE &
>> MCSA 2003/2000, MCSA Messaging 2003
>> Microsoft Certified Trainer
>> Microsoft MVP - Directory Services
>> If you feel this is an urgent issue and require immediate assistance,
>> please contact Microsoft PSS directly. Please check
>> http://support.microsoft.com for regional support phone numbers.
>>
>> .
>>
Re: Users appear dithered in Global Group, 2003 Fun level [message #397657 is a reply to message #397625] Mon, 22 February 2010 17:31 Go to previous message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"doc_king" <docking@discussions.microsoft.com> wrote in message
news:AA343BF4-70AB-4241-87DB-E380A3A741CC@microsoft.com...
> Ace and Meinolf,
>
> You guys are both wizards! That is exactly what is going on, I
> double-checked my group membership with dsget/dsquery and I have 585
> users. I
> will also need to correctly delegate unlock permissions (actually ensure
> it
> was done properly). In case anyone hasn't told you lately, you provide an
> invalulable service that is greatly apprecaited. Thank you very much for
> your
> help.
>
> -Chris

Thank you for the plug, and feedback Chris! We are all here to help. :-)

You are welcome any time!

Ace
Previous Topic:General Users Container Question
Next Topic:Partial Merge
Goto Forum:
  


Current Time: Thu Jan 18 20:52:35 MST 2018

Total time taken to generate the page: 0.02202 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software