Security Group - Global Problem - Not showing members

I have an issue that I am not sure about. We have a Win2k3 Domain. I
recently got a "complaint" that some users were not getting emails
that they should be based on some distribution lists and I started
poing around.

I have found a couple Global Security groups that show no members. But
if I go look at the users that should be in those Groups, they show on
their user record under Member of.

I have removed them and re-added and still no change. any ideas?

I just found something else, I am wondering now if these groups aren't
corrupted in some way. I clicked on the security tab and get the
following popup:

"Windows can not edit the permissions on 'Records Team' because they
have been written in a nonstandard format by another application. To
enable editing, you must use the application to restore the
permissions to a standard format."

I am not sure what other application may have been used in the past. I
went in and I can't change anything security wise on this group. I
went into others that I have created while I have been here and they
are fine. My guess is delete and recreate?!? Anyone able to confirm
for me?


On May 8, 10:40*am, TimParker <tim...@gmail.com> wrote:
> I have an issue that I am not sure about. We have a Win2k3 Domain. I
> recently got a "complaint" that some users were not getting emails
> that they should be based on some distribution lists and I started
> poing around.
>
> I have found a couple Global Security groups that show no members. But
> if I go look at the users that should be in those Groups, they show on
> their user record under Member of.
>
> I have removed them and re-added and still no change. any ideas?

"TimParker" <timpar@gmail.com> wrote in message
news:d2240abd-bf71-4341-9dea-0bdd4051e6fd@e23g2000vbe.googlegroups.com...
I just found something else, I am wondering now if these groups aren't
corrupted in some way. I clicked on the security tab and get the
following popup:

"Windows can not edit the permissions on 'Records Team' because they
have been written in a nonstandard format by another application. To
enable editing, you must use the application to restore the
permissions to a standard format."

I am not sure what other application may have been used in the past. I
went in and I can't change anything security wise on this group. I
went into others that I have created while I have been here and they
are fine. My guess is delete and recreate?!? Anyone able to confirm
for me?


On May 8, 10:40 am, TimParker <tim...@gmail.com> wrote:
> I have an issue that I am not sure about. We have a Win2k3 Domain. I
> recently got a "complaint" that some users were not getting emails
> that they should be based on some distribution lists and I started
> poing around.
>
> I have found a couple Global Security groups that show no members. But
> if I go look at the users that should be in those Groups, they show on
> their user record under Member of.
>
> I have removed them and re-added and still no change. any ideas?

=====
Hello Tim,

Was this domain upgraded from 2000 or NT4?
If you delete the group, and recreate it, do you still have the problem?
How many DCs?
What FL is the domain/forest in?

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer
aceman@mvps.RemoveThisPart.org

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

"Efficiency is doing things right; effectiveness is doing the right
things." - Peter F. Drucker
http://twitter.com/acefekay

Hello TimParker,

Do you have more then one DC? Check if the symptoms on all are the same or
if it is only one.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I just found something else, I am wondering now if these groups aren't
> corrupted in some way. I clicked on the security tab and get the
> following popup:
>
> "Windows can not edit the permissions on 'Records Team' because they
> have been written in a nonstandard format by another application. To
> enable editing, you must use the application to restore the
> permissions to a standard format."
>
> I am not sure what other application may have been used in the past. I
> went in and I can't change anything security wise on this group. I
> went into others that I have created while I have been here and they
> are fine. My guess is delete and recreate?!? Anyone able to confirm
> for me?
>
> On May 8, 10:40 am, TimParker <tim...@gmail.com> wrote:
>
>> I have an issue that I am not sure about. We have a Win2k3 Domain. I
>> recently got a "complaint" that some users were not getting emails
>> that they should be based on some distribution lists and I started
>> poing around.
>>
>> I have found a couple Global Security groups that show no members.
>> But if I go look at the users that should be in those Groups, they
>> show on their user record under Member of.
>>
>> I have removed them and re-added and still no change. any ideas?
>>

Thanks for the replies so far, I believe this was upgraded from Win2k
(I think) I will try and find that out today for sure. As for the
comment about checking a different DC it is the same behavior on other
DC's.

I haven't tried replacing the group yet. I had a busy weekend
(daughters birthday and then Mother's Day) I am going to try that this
morning before users start working.

On May 9, 9:34*am, Meinolf Weber [MVP-DS] <meiweb(nospam)@gmx.de>
wrote:
> Hello TimParker,
>
> Do you have more then one DC? Check if the symptoms on all are the same or
> if it is only one.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
>
> > I just found something else, I am wondering now if these groups aren't
> > corrupted in some way. I clicked on the security tab and get the
> > following popup:
>
> > "Windows can not edit the permissions on 'Records Team' because they
> > have been written in a nonstandard format by another application. To
> > enable editing, you must use the application to restore the
> > permissions to a standard format."
>
> > I am not sure what other application may have been used in the past. I
> > went in and I can't change anything security wise on this group. I
> > went into others that I have created while I have been here and they
> > are fine. My guess is delete and recreate?!? Anyone able to confirm
> > for me?
>
> > On May 8, 10:40 am, TimParker <tim...@gmail.com> wrote:
>
> >> I have an issue that I am not sure about. We have a Win2k3 Domain. I
> >> recently got a "complaint" that some users were not getting emails
> >> that they should be based on some distribution lists and I started
> >> poing around.
>
> >> I have found a couple Global Security groups that show no members.
> >> But if I go look at the users that should be in those Groups, they
> >> show on their user record under Member of.
>
> >> I have removed them and re-added and still no change. any ideas?- Hidequoted text -
>
> - Show quoted text -

I just recreated a small group so that my test would be fast. It
appears to be fine now. There must be something that they have done in
the past that caused it to "break" I only have 4 groups that I see
right now that aren't showing the members. So not much to have to
recreate.


On May 11, 6:49*am, TimParker <tim...@gmail.com> wrote:
> Thanks for the replies so far, I believe this was upgraded from Win2k
> (I think) I will try and find that out today for sure. As for the
> comment about checking a different DC it is the same behavior on other
> DC's.
>
> I haven't tried replacing the group yet. I had a busy weekend
> (daughters birthday and then Mother's Day) I am going to try that this
> morning before users start working.
>
> On May 9, 9:34*am, Meinolf Weber [MVP-DS] <meiweb(nospam)@gmx.de>
> wrote:
>
>
>
> > Hello TimParker,
>
> > Do you have more then one DC? Check if the symptoms on all are the sameor
> > if it is only one.
>
> > Best regards
>
> > Meinolf Weber
> > Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> > no rights.
> > ** Please do NOT email, only reply to Newsgroups
> > ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > > I just found something else, I am wondering now if these groups aren't
> > > corrupted in some way. I clicked on the security tab and get the
> > > following popup:
>
> > > "Windows can not edit the permissions on 'Records Team' because they
> > > have been written in a nonstandard format by another application. To
> > > enable editing, you must use the application to restore the
> > > permissions to a standard format."
>
> > > I am not sure what other application may have been used in the past. I
> > > went in and I can't change anything security wise on this group. I
> > > went into others that I have created while I have been here and they
> > > are fine. My guess is delete and recreate?!? Anyone able to confirm
> > > for me?
>
> > > On May 8, 10:40 am, TimParker <tim...@gmail.com> wrote:
>
> > >> I have an issue that I am not sure about. We have a Win2k3 Domain. I
> > >> recently got a "complaint" that some users were not getting emails
> > >> that they should be based on some distribution lists and I started
> > >> poing around.
>
> > >> I have found a couple Global Security groups that show no members.
> > >> But if I go look at the users that should be in those Groups, they
> > >> show on their user record under Member of.
>
> > >> I have removed them and re-added and still no change. any ideas?- Hide quoted text -
>
> > - Show quoted text -- Hide quoted text -
>
> - Show quoted text -

"TimParker" <timpar@gmail.com> wrote in message news:14a21dd3-44eb-49c5-9c80-0667c93bde81@o20g2000vbh.googlegroups.com...
> I just recreated a small group so that my test would be fast. It
> appears to be fine now. There must be something that they have done in
> the past that caused it to "break" I only have 4 groups that I see
> right now that aren't showing the members. So not much to have to
> recreate.

Interesting. I don't know what could have caused it to "break."

What domain and forest level is it set to?
Can you post an unedited ipconfig /all please to get a better idea of your AD's config, please?

Ace

I talked with our Executive Director today and apparently this domain
started "back in the day" with win2k and upgraded to win2k3.

A predecessor of mine apparently talked them into buying something
called Ideal Administrator. That was the only "tool" that he knew of
that anyone has used other than default MS tools that might have
screwed up these 4 groups. I recreated the other 3 this morning and
everything seems to be good right now. I hope!


On May 11, 9:43*pm, "Ace Fekay [Microsoft Certified Trainer]"
<ace...@mvps.RemoveThisPart.org> wrote:
> "TimParker" <tim...@gmail.com> wrote in messagenews:14a21dd3-44eb-49c5-9c80-0667c93bde81@o20g2000vbh.googlegroups.com...
> > I just recreated a small group so that my test would be fast. It
> > appears to be fine now. There must be something that they have done in
> > the past that caused it to "break" I only have 4 groups that I see
> > right now that aren't showing the members. So not much to have to
> > recreate.
>
> Interesting. I don't know what could have caused it to "break."
>
> What domain and forest level is it set to?
> Can you post an unedited ipconfig /all please to get a better idea of your AD's config, please?
>
> Ace

"TimParker" <timpar@gmail.com> wrote in message news:27be4ba0-4094-480d-aeec-ac8302d25300@l28g2000vba.googlegroups.com...
>
> I talked with our Executive Director today and apparently this domain
> started "back in the day" with win2k and upgraded to win2k3.
>
> A predecessor of mine apparently talked them into buying something
> called Ideal Administrator. That was the only "tool" that he knew of
> that anyone has used other than default MS tools that might have
> screwed up these 4 groups. I recreated the other 3 this morning and
> everything seems to be good right now. I hope!

Hmm, that could explain it. I've never heard or have used Ideal Administrator. Well, at least I am glad you've figured out the cause!!

Ace