AD User Groups in DCE

[DCIM_Support]

I have a client that has configured authentication servers within DCE. For individual remote users all works fine but they having issues with User Groups. They are able to see the User Groups but not the members of the groups and members of these group cannot log into DCE. Is there something they could have missed? 

Apparently the same User Groups work fine on all other systems but on DCE.

(CID:103585126)

[DCIM_Support]

Kevin,

Please reference knowledge base article FA158395 for some tips on configuring Active Directory.  Please ensure that the group type is NOT a global group.  The users and groups need to be within the same search base that is being defined within DCE for your Active Directory server.  If the users are outside of the search base, but the group is not, StruxureWare will not be able to authenticate the users.

Best Regards,

Cory

(CID:103585133)

[DCIM_Support]

Thank you Cory. The knowledge is quite helpful. Will revert back once i have feedback from the client.

(CID:103585143)

[DCIM_Support]

Hi Cory, I was on site to assist with configuring User Groups from AD for DCE. For individual users it worked fine but we could not get the User Groups to work. We were getting an error pop-up stating " Error setting the remote authentication values." We had changed the group from Global to Universal. The search base only had 146 entries and there are two redundant AD servers. The version of AD is 6.0.6002.18005 and it is on a Server 2003 platform. Is there anything else we can have a look at?

(CID:103585339)

[DCIM_Support]

Kevin, Please try copying the settings from your current Active Directory server bind within DCE and then deleting/re-adding the remote authentication server. Best Regards, Cory

(CID:103585384)

[DCIM_Support]

Hi Kevin,

Just to add to Cory's response, you will never see the individuals in the group within DCE. You will only be able to see the group itself and can only apply rights to that group within DCE and not the individuals contained within.

Steve

(CID:103585144)

[DCIM_Support]

Thank you Steven!

(CID:103585145)

[DCIM_Support]

Hi Cory,

The server bind settings have been deleted and re-added as instructed. The client is now able to add individual users and domain admin group (Global) but there are still issues with user groups (Universal). Could there be something we are missing? Please note we have tried T2_Engineers as a Universal Group without any luck.

(CID:103585696)

[DCIM_Support · Accepted solution]

Kevin,

I have been unable to replicate the error message that you are receiving.  Please add a new user group within the bind location, and provide it with a name that does not have any special characters or spaces.  Add a new test user within the same location and ensure that it is a member of the group.  The group should be a Universal group.  Provide screen captures of the preference settings for the user and user group within the active directory server.  Ensure that the bind user has full control the user groups within active directory.

How many objects are within the bind location?

Best Regards,

Cory

(CID:103585818)

[DCIM_Support]

Hi Cory, thank you for the assistance. Removing the special characters resolved the issue. All is working as it should now. Much appreciated.

(CID:103585921)

[DCIM_Support]

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.