Article ID: 108874
Article Last Modified on 11/1/2006
APPLIES TO
- Microsoft Windows NT Advanced Server 3.1
- Microsoft Windows NT Workstation 3.1
- Microsoft Windows NT Advanced Server 3.1
This article was previously published under Q108874
SYMPTOMS
In some cases, when you create a new Group on a primary domain controller (PDC) then add a new User to the new Group, a full synchronization occurs on an OS/2 backup domain controller (BDC); the entire accounts database is copied from the PDC to the BDC.
CAUSE
During the partial sync, NetLogon on the PDC packs a delta for each of the following events:
- The membership of the group is changed.
- A new user is added.
- The new user is added to the group.
For the first event, the delta contains the membership of the group. However, the newly-added user is a member of the group. When the BDC gets this delta, it doesn't handle it properly because the new user doesn't exist yet on the BDC.
STATUS
This behavior is by design in the LAN Manager NetLogon service.
MORE INFORMATION
Steps to Reproduce Problem
- Open User Manager For Domains.
- Select a user.
- Choose User, and then choose New Global Group.
- Add the group. (Note that the user will automatically be added to the group.)
- Immediately create a user.
- Add this user to the already created new group.
The full sync then occurs to the OS/2 BDC.
If you are using LAN Manager version 2.2b on the BDC, error 3226 ( c9 08-- 2249 ) may appear in the error log:
Additional query words: prodnt
Keywords: kbenv KB108874
