There may be a problem with the delegation of the infrastructure master role. The machine with the infrastructure master role updates the group-to-user reference whenever group memberships change and replicates these changes across the domain. At any time, the infrastructure master role can be assigned to only one domain controller in each domain, so there's a chance that identity may have become corrupted. You can identify the computer holding the infrastructure master role by using the command netdom query fsmo and repair or replace the computer holding the infrastructure master role. It may be necessary to seize the infrastructure master role using the AD server in question.
This was first published in March 2004
Join the conversationComment
Share
Comments
Results
Contribute to the conversation