BUG: You Can Add Invalid Groups to MCMS Rights Groups (330818)
The information in this article applies to:
- Microsoft Content Management Server 2001
- Microsoft Content Management Server 2002
This article was previously published under Q330818 SYMPTOMS
When a Microsoft Content Management Server (MCMS) administrator uses the Site Manager to enumerate a list of users from a Microsoft Windows 2000 domain, some of the user groups that are listed may not be visible in the Local Users and Groups list in the Windows Computer Management snap-in. Additionally, Microsoft Windows NT users who only have rights to MCMS through these Windows NT user groups cannot log on to MCMS.
CAUSE
These Windows NT user groups are domain local groups. By definition, these Windows NT user groups can be used to grant access to resources on any computer only if the domain is in native mode. In mixed mode, these Windows NT user groups are treated as machine local groups on the domain controller, so these Windows NT user groups are not visible in the Local Users and Groups list in the Windows Computer Management snap-in. However, MCMS does not filter out these Windows NT user groups if the domain is operating in mixed mode.
RESOLUTION
The MCMS administrator must not use domain local groups when the administrator assigns user rights to MCMS if the domain is running in mixed mode.
STATUSMicrosoft has confirmed that this is a bug in the Microsoft products that are listed at the beginning of this article.
| Modification Type: | Major | Last Reviewed: | 10/23/2003 |
|---|
| Keywords: | kbbug kbfix KB330818 |
|---|
|