Microsoft KB Archive/917194

= Error message when you try to open your account in Groove: &quot;The supplied identity is not allowed on your machine&quot; =

Article ID: 917194

Article Last Modified on 11/21/2007

-

APPLIES TO


 * Groove Enterprise Management Server 2.5
 * Groove Enterprise Management Server 3.0
 * Groove Enterprise Management Server 3.1
 * Groove Hosted Management Services 3.1
 * Groove Virtual Office 3.0 File Sharing Edition
 * Groove Virtual Office 3.0 Professional Edition
 * Groove Virtual Office 3.0 Project Edition
 * Groove Virtual Office 3.0 Trial Edition
 * Groove Virtual Office 3.1 File Sharing Edition
 * Groove Virtual Office 3.1 Professional Edition
 * Groove Virtual Office 3.1 Project Edition
 * Groove Virtual Office 3.1 Trial Edition
 * Groove Workspace 2.5 Preview Edition
 * Groove Workspace 2.5 Professional Edition
 * Groove Workspace 2.5 Project Edition
 * Groove Workspace 2.5 Standard Edition
 * Microsoft Office Groove 2007
 * Microsoft Office Groove Server 2007 Manager

-



SYMPTOMS
When you try to configure or to restore your account in Groove, you receive the following error message:

The supplied identity is not allowed on your machine. Please contact your Groove administrator.

This issue occurs even if you use the activation key or the configuration code that is sent to you by your administrator, or if you try to import a valid domain account that you have already configured on another computer.



CAUSE
This issue occurs for one of the following reasons:
 * The Groove domain administrator has set a policy to prevent identities in the domain from being installed on computers that are not managed by the Groove domain, and your computer is not managed by the Groove domain.
 * The computer is managed by another Groove domain, and the Groove domain administrator for that domain has set a policy to prevent identities that are not managed by the domain from being installed on computers that are managed by the Groove domain.
 * The computer is managed by another Groove domain, and the administrator of that domain has set a policy to prevent members from creating multiple accounts on a managed computer.



RESOLUTION
Each of these issues can be resolved in the following ways:
 * Make the computer a managed device in the Groove domain that manages the identity
 * Disable the policy that prevents the managed identity

How to make the computer a managed device in the Groove domain
Caution A computer can be managed by only one Groove domain at at time. If the computer is already managed by another Groove domain, this method will stop the computer from being managed by that domain. This may cause identities that were issued in the previous domain to stop working.
 * 1) Log on to the Groove Manager site or the Management Server site, select a device template, and then click Download Device Management Key. The File Download window appears.
 * 2) Click Save, enter a directory location, and then click Save to save the management server registry key in a .reg file.
 * 3) Provide the .reg file to the user who is using the client computer.
 * 4) On the client computer, make sure that Groove is closed. If you see a Groove icon in the notification area, click the icon, and then click Exit or Exit Groove.
 * 5) On the client computer, double-click the .reg file to add the key to the registry and to make the computer a managed Groove domain device.
 * 6) Restart Groove, and then open the managed account.

How to disable the policy that prevents identities that are managed by the domain from being installed on computers that are not managed by the domain
If the domain administrator set a policy to prevent identities that are managed by the domain from being installed on computers that are not managed by the Groove domain, the administrator can resolve this issue by disabling that policy.
 * 1) Log on to the Groove Manager site or the Management Server site, open the domain, click to open Identity Policy Templates, and then click the policy template for the user.
 * 2) Click the Member Policies tab, and then click to clear the check box for the policy. The exact name of this policy varies by version, as follows:
 * 3) * In Microsoft Office Groove Manager 2007:

Members can only use managed identities from this domain on devices in this domain
 * 1) * In Groove Enterprise Management Server 3.1:

Members can only use managed identities from this domain on devices in this domain
 * 1) * In Groove Enterprise Management Server 3.0 and in earlier versions of Groove Enterprise Management Server:

Identity may only be used on a managed device in the domain

How to disable the policy that prevents identities that are not managed by the domain from being installed on computers that are managed by the domain
Consider the following scenario. A computer is managed by another Groove domain. The Groove domain administrator for that domain has set a policy to prevent identities that are not managed by the domain from being installed on computers that are managed by the Groove domain.

In this scenario, an administrator from the domain that manages the computer can resolve this issue by disabling that policy. To do this, follow these steps:
 * 1) Log on to the Groove Manager site or the Management Server site, open the domain, click to open Device Policy Templates, and then click the policy template for the user.
 * 2) Click the Account Policies tab, and then click to clear the check box for the Members can only use managed identities from this domain on devices in this domain policy.

How to disable the policy that prevents members from creating multiple accounts on a managed computer
Consider the following scenario. A computer is managed by another Groove domain. The administrator of that domain has set a policy to prevent members from creating multiple accounts on a managed computer.

In this scenario, an administrator from the domain that manages the computer can resolve this issue by disabling that policy. To do this, follow these steps:
 * 1) Log on to the Groove Manager site or the Management Server site, open the domain, click to open Device Policy Templates, and then click the policy template for the user.
 * 2) Click the Account Policies tab, and then click to clear the check box for the Members cannot create multiple accounts policy.

Additional query words: TCN-01113 Groove2007

Keywords: kbtshoot kbprb kbexpertiseinter KB917194

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.