Cannot add a user to group using active directory users and computers console

Rahul

Hello All,
On a member server, I am trying to make a user the member of
administrators' group. (I am logged on as administrator). But when I
open user's properties from "Active Directory Users and Computers"
console and go to "Member of" tab and click on "Add" button, I get the
MessageBox saying:
"The program cannot open the required dialog box because no locations
can be found. Close this message and try again."
(And after I click on
"Close", another dialog box opens saying)
"The parameter is incorrect".
A few days ago, there was no problem with this machine, when suddenly,
the machine went offline. (This is a remote machine. I don't know the
problem that occurred).
I also have the access to domain controller and I can do everything
properly from there. (Except to instruct the member server to behave
and do it's job. As I am unsure about what exactly is causing the
problem.)
I can do almost everything else, like creating new user, group, delete
user or group, change password, log in, log out etc. etc.
Can anyone guide me regarding the problem?

Paul Bergson [MVP-DS]

On the workstation in question from a command prompt try
nltest /sc_verify:YourDomainName

This will check to see if the secure channel is working between the client
and the domain. If not it should rebuild it for you.


For more info on nltest -> nltest /?

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"Rahul" <rahuldj***********> wrote in message
news:1181119473.744832.205790@o11g2000prd.googlegr oups.com...
> Hello All,
> On a member server, I am trying to make a user the member of
> administrators' group. (I am logged on as administrator). But when I
> open user's properties from "Active Directory Users and Computers"
> console and go to "Member of" tab and click on "Add" button, I get the
> MessageBox saying:
> "The program cannot open the required dialog box because no locations
> can be found. Close this message and try again."
> (And after I click on
> "Close", another dialog box opens saying)
> "The parameter is incorrect".
> A few days ago, there was no problem with this machine, when suddenly,
> the machine went offline. (This is a remote machine. I don't know the
> problem that occurred).
> I also have the access to domain controller and I can do everything
> properly from there. (Except to instruct the member server to behave
> and do it's job. As I am unsure about what exactly is causing the
> problem.)
> I can do almost everything else, like creating new user, group, delete
> user or group, change password, log in, log out etc. etc.
> Can anyone guide me regarding the problem?
>

Rahul

On Jun 6, 5:56 pm, "Paul Bergson [MVP-DS]"
<pbergson@allete_nospam.com> wrote:
> On the workstation in question from a command prompt try
> nltest /sc_verify:YourDomainName
>
> This will check to see if the secure channel is working between the client
> and the domain. If not it should rebuild it for you.
>
> For more info on nltest -> nltest /?
>
> --
> Paul Bergson
> MVP - Directory Services
> MCT, MCSE, MCSA, Security+, BS CSci
> 2003, 2000 (Early Achiever), NT
>
> http://www.pbbergs.com
>
> Please no e-mails, any questions should be posted in the NewsGroup
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> "Rahul" <rahu...***********> wrote in message
>
> news:1181119473.744832.205790@o11g2000prd.googlegr oups.com...
>
> > Hello All,
> > On a member server, I am trying to make a user the member of
> > administrators' group. (I am logged on as administrator). But when I
> > open user's properties from "Active Directory Users and Computers"
> > console and go to "Member of" tab and click on "Add" button, I get the
> > MessageBox saying:
> > "The program cannot open the required dialog box because no locations
> > can be found. Close this message and try again."
> > (And after I click on
> > "Close", another dialog box opens saying)
> > "The parameter is incorrect".
> > A few days ago, there was no problem with this machine, when suddenly,
> > the machine went offline. (This is a remote machine. I don't know the
> > problem that occurred).
> > I also have the access to domain controller and I can do everything
> > properly from there. (Except to instruct the member server to behave
> > and do it's job. As I am unsure about what exactly is causing the
> > problem.)
> > I can do almost everything else, like creating new user, group, delete
> > user or group, change password, log in, log out etc. etc.
> > Can anyone guide me regarding the problem?

Thank you for the information.

I did not have the nltest file and downloaded the NT 4.0 resource kit
which had this exe.
But there is no nltest /sc_verify option in this exe. The closes I
found was nltest /sc_query:servername and after running it I get the
following output:

Flags: 0
Connection Status = 1787 0x6fb ERROR_NO_TRUST_SAM_ACCOUNT
Trusted DC Name
Trusted DC Connection Status Status = 1787 0x6fb
ERROR_NO_TRUST_SAM_ACCOUNT
The command completed successfully

Then I looked at the properties and tried the nltest /
sc_reset:servername and after running it I got the message

I_NetLogonControl failed: Status = 1787 0x6fb
ERROR_NO_TRUST_SAM_ACCOUNT

I am not able to decipher whatever it means. Is it possible for you to
interpret this for me?

Paul Bergson [MVP-DS]

If you don't have the tools installed, install them from your server install
disk.
d:\support\tools\setup.exe

You can just remove and add the workstation to the domain and this should
re-establish the secure channel.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"Rahul" <rahuldj***********> wrote in message
news:1181138695.145120.44080@o11g2000prd.googlegro ups.com...
> On Jun 6, 5:56 pm, "Paul Bergson [MVP-DS]"
> <pbergson@allete_nospam.com> wrote:
>> On the workstation in question from a command prompt try
>> nltest /sc_verify:YourDomainName
>>
>> This will check to see if the secure channel is working between the
>> client
>> and the domain. If not it should rebuild it for you.
>>
>> For more info on nltest -> nltest /?
>>
>> --
>> Paul Bergson
>> MVP - Directory Services
>> MCT, MCSE, MCSA, Security+, BS CSci
>> 2003, 2000 (Early Achiever), NT
>>
>> http://www.pbbergs.com
>>
>> Please no e-mails, any questions should be posted in the NewsGroup
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>> "Rahul" <rahu...***********> wrote in message
>>
>> news:1181119473.744832.205790@o11g2000prd.googlegr oups.com...
>>
>> > Hello All,
>> > On a member server, I am trying to make a user the member of
>> > administrators' group. (I am logged on as administrator). But when I
>> > open user's properties from "Active Directory Users and Computers"
>> > console and go to "Member of" tab and click on "Add" button, I get the
>> > MessageBox saying:
>> > "The program cannot open the required dialog box because no locations
>> > can be found. Close this message and try again."
>> > (And after I click on
>> > "Close", another dialog box opens saying)
>> > "The parameter is incorrect".
>> > A few days ago, there was no problem with this machine, when suddenly,
>> > the machine went offline. (This is a remote machine. I don't know the
>> > problem that occurred).
>> > I also have the access to domain controller and I can do everything
>> > properly from there. (Except to instruct the member server to behave
>> > and do it's job. As I am unsure about what exactly is causing the
>> > problem.)
>> > I can do almost everything else, like creating new user, group, delete
>> > user or group, change password, log in, log out etc. etc.
>> > Can anyone guide me regarding the problem?
>
> Thank you for the information.
>
> I did not have the nltest file and downloaded the NT 4.0 resource kit
> which had this exe.
> But there is no nltest /sc_verify option in this exe. The closes I
> found was nltest /sc_query:servername and after running it I get the
> following output:
>
> Flags: 0
> Connection Status = 1787 0x6fb ERROR_NO_TRUST_SAM_ACCOUNT
> Trusted DC Name
> Trusted DC Connection Status Status = 1787 0x6fb
> ERROR_NO_TRUST_SAM_ACCOUNT
> The command completed successfully
>
> Then I looked at the properties and tried the nltest /
> sc_reset:servername and after running it I got the message
>
> I_NetLogonControl failed: Status = 1787 0x6fb
> ERROR_NO_TRUST_SAM_ACCOUNT
>
> I am not able to decipher whatever it means. Is it possible for you to
> interpret this for me?
>