Microsoft KB Archive/297897

From BetaArchive Wiki
Knowledge Base


Members of the Mobility Administrators Group Cannot Enable Users for Wireless Access

Article ID: 297897

Article Last Modified on 10/28/2006



APPLIES TO

  • Microsoft Mobile Information Server 2001 Enterprise Edition



This article was previously published under Q297897


SYMPTOMS

By default, if you are only a member of the Microsoft Mobility Administrators group, you cannot enable users for Mobile Information Server wireless access in any security topology other than the Integrated topology.

CAUSE

This behavior occurs because in topologies other than the Integrated topology, wireless accounts must be created. A wireless account is an account that includes the user name and a "-W" suffix, or a new account in an auxiliary domain or forest. By default, the Mobility Administrators group does not have permissions to create new accounts.

RESOLUTION

If you want to enable the Mobility Administrators group to create the necessary wireless accounts, add the Mobility Administrators group to the Account Operators built-in group in the domain where you want to create the wireless accounts. The domain where you add these accounts is dependant on the security topology that is being used.

The following list describes the possible topologies and the domains where the Mobility Administrators group should be added to the Account Operators group:

  • If you are using wireless accounts with a "-W" suffix in the same domain, add the Mobility Administrators group to the Account Operators group of the current domain.
  • If you are using an auxiliary domain, add the Mobility Administrators group to the Account Operators group of the auxiliary domain.
  • If you are using an auxiliary domain in an auxiliary forest, add the Mobility Administrators group to the Account Operators group of the auxiliary domain in the auxiliary forest.



Additional query words: mmis mis

Keywords: kbprb KB297897