CCS-IT Posted November 13, 2014 Share Posted November 13, 2014 Hi, One of the AD account which are in Domain users group member are not able to search other AD users account in same domain while he want to grant permission for any folders/files. Please refer the attached snapshot. Same thing when others AD users are searching any user account they are successfully search the account and grant the permission. This issue is just for single AD account. There are no system issue, because we have tested other users on same system so it was no issues at all. Thanks in advance. Link to comment Share on other sites More sharing options...
sc302 Veteran Posted November 13, 2014 Veteran Share Posted November 13, 2014 (Moved to Server Support) As far as I am concerned, users are not allowed to assign rights to files or folders, that is the admins job. That being said, I have no clue what you are trying to accomplish otherwise. if you can't search, it sounds as if you have a dns misconfiguration somewhere. Link to comment Share on other sites More sharing options...
+BudMan MVC Posted November 13, 2014 MVC Share Posted November 13, 2014 So what user is logged in, is it a domain user? Sure they are not locally logged into the machine? I have to question the fact that users would be setting permissions for other users to be honest ;) That doesn't seem like a good idea to me, I recall users removing system, and admins - and all it did was break backups and cause us to fix it, etc. Thinking they could or even should try and lock out domain admins, etc. ;) Link to comment Share on other sites More sharing options...
CCS-IT Posted November 13, 2014 Author Share Posted November 13, 2014 @ SC302, Delegation has given to their site OU and they are able to grant permission previously but somehow they did not now. That user have full permission over the folder and files so permission is not a concerns. If it is DNS misconfig.... issue then how come others AD users are able to do same task were user1 getting error message on same system? (Name not Found) @ BudMan, Yes that account is domain account and he logged his system in domain only. He failed to find any others AD accounts even he tried to put username@domainname.com but still no luck. Link to comment Share on other sites More sharing options...
sc302 Veteran Posted November 17, 2014 Veteran Share Posted November 17, 2014 Would need to see the system and the DCs to make a proper diagnostic. Perhaps there is something in the eventlogs that may be of assistance. Link to comment Share on other sites More sharing options...
Recommended Posts