Microsoft KB Archive/330818

= BUG: You Can Add Invalid Groups to MCMS Rights Groups =

Article ID: 330818

Article Last Modified on 2/22/2007

-

APPLIES TO


 * Microsoft Content Management Server 2001 Enterprise Edition
 * Microsoft Content Management Server 2002

-



This article was previously published under Q330818



SYMPTOMS
When a Microsoft Content Management Server (MCMS) administrator uses the Site Manager to enumerate a list of users from a Microsoft Windows 2000 domain, some of the user groups that are listed may not be visible in the Local Users and Groups list in the Windows Computer Management snap-in. Additionally, Microsoft Windows NT users who only have rights to MCMS through these Windows NT user groups cannot log on to MCMS.



CAUSE
These Windows NT user groups are domain local groups. By definition, these Windows NT user groups can be used to grant access to resources on any computer only if the domain is in native mode. In mixed mode, these Windows NT user groups are treated as machine local groups on the domain controller, so these Windows NT user groups are not visible in the Local Users and Groups list in the Windows Computer Management snap-in. However, MCMS does not filter out these Windows NT user groups if the domain is operating in mixed mode.



RESOLUTION
The MCMS administrator must not use domain local groups when the administrator assigns user rights to MCMS if the domain is running in mixed mode.



STATUS
Microsoft has confirmed that this is a bug in the Microsoft products that are listed at the beginning of this article.

Keywords: kbbug kbfix KB330818

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.