Microsoft KB Archive/227512

= Active Directory Users and Computers Icon Changes Based on Logged-On User =

Article ID: 227512

Article Last Modified on 2/25/2007

-

APPLIES TO


 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Professional Edition
 * Microsoft Windows 2000 Datacenter Server

-



This article was previously published under Q227512





SYMPTOMS
When different users view user and computer objects in the Active Directory Users and Computers Microsoft Management Console (MMC) snap-in, they may see different icons representing user and computer objects. Specifically, some users may see the red "x" icon that denotes a disabled account, while others do not.



CAUSE
This behavior is caused by the client having insufficient permissions on the objects in the Active Directory that represent the users or computers being displayed. When this occurs, the Access Control List (ACL) that defines which permissions which users and groups have on the object does not permit the user to read the Active Directory attribute that contains the status of the account.



RESOLUTION
To work around this behavior, place the user in a group that has (or is explicitly given) at least Read permissions on the userAccountControl attribute of the object being viewed.



STATUS
This behavior is by design.

Keywords: kbenv kbprb KB227512

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.