Was wondering if anyone could help out Jerome over at the KiXtart HelpDesk

He's got a weird one, did a search on the old board here and couldn't find anything (anyone?) ... his name is Jerome and he's in the "Help Me!" forum !

Thanks

-Shawn

Symptoms:

...The client event log has the following 3 error events when I run a single line script with the statement-

? "Homeshr = " + @HomeShr

(1) Event ID 5 - the gist of the error is "The following information is part of the event: GetUserInfo failed error: Access is denied. (0x5/5)."

(2) Event ID 1332 - "LookupAccountSid failed Error: No mapping between account names and security ID's was done. (0x534/1332)."

(3) Event ID 5 - "UserGetLocalGroups failed Error: Access is denied. (0x5/5)."

Solution:

After testing this script using my admin account (Domain Admins), was able to prove that there was a problem with permissions on all or part of the AD.

Eventually discovered that the Authenticated Users group only had Read access to the top level of the domain ie. the domain name in Active Directory Users and Computers. When I modified the access control settings to "This object and all child objects", viola, the script macros were able to read the required info from AD.

Jerome

[-Shawn]

[ 13 December 2001: Message edited by: Shawn ]