Account Operators Cannot Modify FPNW-Enabled Users (284464)



The information in this article applies to:

  • Microsoft Windows 2000 Server SP1
  • Microsoft Windows 2000 Server SP2
  • Microsoft Windows 2000 Advanced Server SP1
  • Microsoft Windows 2000 Advanced Server SP2

This article was previously published under Q284464

SYMPTOMS

When an account operator views the properties of a user in the Active Directory Users and Computers snap-in and File and Print Services for NetWare (FPNW)is installed, the NW Compatible tab may be missing. Also, an account operator may receive the following error message when the operator tries to change the password of a NetWare-enabled user:
Insufficient access rights to perform this operation.

CAUSE

This problem can occur if the account operator does not have sufficient rights to perform the operation.

RESOLUTION

To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

260910 How to Obtain the Latest Windows 2000 Service Pack

IMPORTANT: After you install the hotfix from this article, you must use the following steps:
  1. Start the Active Directory Users & Computers MMC.
  2. On the View menu, click Advanced Features.
  3. Right-click the System OU, and then click Delegate Control.
  4. Follow the steps in the Delegation Wizard to grant Read access to the Account Operators group.
The English version of this fix should have the following file attributes or later:
   Date          Time    Version        Size     File name
   --------------------------------------------------------
   Jul 26, 2001  16:16   5.0.2195.3924  296,720  Dsprop.dll
   Jul 24, 2001  20:12   5.0.2195.3924  231,376  Fpnw.dll
				
NOTE: Apply the hotfix to the client and the File and Print Services for NetWare server PDC operations master (also known as flexible single master operations or FSMO) for this fix to operate properly.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Windows 2000 Service Pack 3.

MORE INFORMATION

For additional information about how to install Windows 2000 and Windows 2000 hotfixes at the same time, click the article number below to view the article in the Microsoft Knowledge Base:

249149 Installing Microsoft Windows 2000 and Windows 2000 Hotfixes

The third-party products that are discussed in this article are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.

Modification Type:MinorLast Reviewed:9/26/2005
Keywords:kbHotfixServer kbQFE kbbug kbDirServices kbenv kberrmsg kbfix kbWin2000PreSP3Fix kbWin2000sp3fix KB284464