Microsoft KB Archive/108874

= Adding Group and User Causes Full Synchronization =

Article ID: 108874

Article Last Modified on 11/1/2006

-

APPLIES TO


 * Microsoft Windows NT Advanced Server 3.1
 * Microsoft Windows NT Workstation 3.1
 * Microsoft Windows NT Advanced Server 3.1

-



This article was previously published under Q108874



SYMPTOMS
In some cases, when you create a new Group on a primary domain controller (PDC) then add a new User to the new Group, a full synchronization occurs on an OS/2 backup domain controller (BDC); the entire accounts database is copied from the PDC to the BDC.



CAUSE
During the partial sync, NetLogon on the PDC packs a delta for each of the following events:


 * The membership of the group is changed.
 * A new user is added.
 * The new user is added to the group.

For the first event, the delta contains the membership of the group. However, the newly-added user is a member of the group. When the BDC gets this delta, it doesn't handle it properly because the new user doesn't exist yet on the BDC.



STATUS
This behavior is by design in the LAN Manager NetLogon service.



Steps to Reproduce Problem

 * 1) Open User Manager For Domains.
 * 2) Select a user.
 * 3) Choose User, and then choose New Global Group.
 * 4) Add the group. (Note that the user will automatically be added to the group.)
 * 5) Immediately create a user.
 * 6) Add this user to the already created new group.

The full sync then occurs to the OS/2 BDC.

If you are using LAN Manager version 2.2b on the BDC, error 3226 ( c9 08-- 2249 ) may appear in the error log:

Error in synchronizing with primary domain controller \\PDC

Additional query words: prodnt

Keywords: kbenv KB108874

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.