Welcome to the new Schneider Electric Community

It's your place to connect with experts and peers, get continuous support, and share knowledge.

  • Explore the new navigation for even easier access to your community.
  • Bookmark and use our new, easy-to-remember address (community.se.com).
  • Get ready for more content and an improved experience.

Contact SchneiderCommunity.Support@se.com if you have any questions.

Close
Invite a Co-worker
Send a co-worker an invite to the Exchange portal.Just enter their email address and we’ll connect them to register. After joining, they will belong to the same company.
Send Invite Cancel
84483members
353701posts

Can not delete AD group from DCE

EcoStruxure IT forum

A support forum for Data Center Operation, Data Center Expert, and EcoStruxure IT product users to share knowledge on installation, configuration, and general product use.

Solved
DCIM_Support
Picard
Picard
0 Likes
4
266

Can not delete AD group from DCE

This question was originally posted on DCIM Support by Chris Gray on 2019-12-06


In short, we had a working group using an LDAP bind to our AD, this connection was made to a single AD server.  This server was then retired, I was not informed about it's retirement.  I was then unable to log in using my AD credentials.

I've established a new LDAP connection, and have added 'different' AD groups and have assigned them rights and I'm able to log in using my AD credentials.

The issue I'm seeing, is the AD group that was bound from the old domain controller that was retired  can not be removed from the System > Users and Device Group access.  When attempting to delete the group I get a message stating that there was 'An error attempting to delete this group'.  When viewing this group, it's not showing any information in the 'type' column, unlike all of the other groups.  This is likely a result of the rug being pulled out from the DCE server's LDAP connection,  is there a way to delete this group?

(CID:152568250)


Accepted Solutions
DCIM_Support
Picard
Picard
0 Likes
2
266

Re: Can not delete AD group from DCE

This answer was originally posted on DCIM Support by Steven Marchetti on 2019-12-06


Hi Chris,

 

Yes, that's a known issue. There are 2 ways to get rid of the old bind listing, neither of them really simple.

1: you can re-add your AD server at the old IP (in the same configuration) for just a short period of time so that DCE can connect and subsequently delete that listing.

2: you'll need to contact tech support directly. If they're allowed remote access to your system, they should be able to remove that listing. Sorry but root access is restricted and that is required to remove these entries.


Thanks,

Steve

(CID:152568254)

See Answer In Context

4 Replies 4
DCIM_Support
Picard
Picard
0 Likes
2
267

Re: Can not delete AD group from DCE

This answer was originally posted on DCIM Support by Steven Marchetti on 2019-12-06


Hi Chris,

 

Yes, that's a known issue. There are 2 ways to get rid of the old bind listing, neither of them really simple.

1: you can re-add your AD server at the old IP (in the same configuration) for just a short period of time so that DCE can connect and subsequently delete that listing.

2: you'll need to contact tech support directly. If they're allowed remote access to your system, they should be able to remove that listing. Sorry but root access is restricted and that is required to remove these entries.


Thanks,

Steve

(CID:152568254)

DCIM_Support
Picard
Picard
0 Likes
0
266

Re: Can not delete AD group from DCE

This comment was originally posted on DCIM Support by Chris Gray on 2019-12-09


Thanks Steve, I've contacted support and will reconnect with them later in the week.

(CID:152568667)

DCIM_Support
Picard
Picard
0 Likes
0
266

Re: Can not delete AD group from DCE

This comment was originally posted on DCIM Support by Steven Marchetti on 2019-12-09


Thanks for the update!

(CID:152568669)

DCIM_Support
Picard
Picard
0 Likes
0
266

🔒 Closed

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.