You Cannot Locate Another Forest to Select a Security Group for Advanced Folder Redirection (814614)



The information in this article applies to:

  • Microsoft Windows Server 2003, Standard Edition
  • Microsoft Windows Server 2003, Enterprise Edition
  • Microsoft Windows Server 2003, Datacenter Edition
  • Microsoft Windows Server 2003, 64-Bit Enterprise Edition
  • Microsoft Windows Server 2003, 64-Bit Datacenter Edition

SYMPTOMS

When you try to locate a domain in another forest to add a security group from that domain to the Security Group Membership list of an Advanced folder redirection policy, the other forest may not appear in the Locations dialog box. Because of this, you cannot select a security group from a domain in another forest.

CAUSE

This problem may occur if the following conditions exist:
  • You are logged on by using a user account from the first forest.
  • The computer account of the computer that you are logged on, is contained in the first forest.
This symptom occurs because the Group Policy object picker component can only be used to select objects from the same forest as that which contains the computer account of the computer you are logged on to.

WORKAROUND

To work around this problem, type the name of the object in the Security Group Membership box of the Specify Group and Location dialog box. When you type the object name, use one of the following formats.

Format 1

NetbiosDomainName\SecurityGroupName

NetbiosDomainName is the NetBIOS name of the remote domain, and SecurityGroupName is the name of the security group that you want to add.

Format 2

SecurityGroupName@domain.com

domain.com is the DNS name of the remote domain.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

Modification Type:MajorLast Reviewed:12/18/2003
Keywords:kbpending kbbug KB814614