People Picker can resolve users and security group from another domain but no validation for groups

Dear all,
Here is the scenario of our issue:
We are migrating from Domain A to Domain B and in Domain A we currently have a SharePoint 2013 on which we want to set permissions for users and groups that have already migrated to Domain B.
A bi-directional trust exist between the two domains and all applications relying on trust and resolving IDs from on domain to another are working fine (Windows RDS for instance)
The "bug" that we have is when using the PeoplePicker, it can resolve without any issue a user account in Domain A or B, and a security group (type global, I haven't tried local or universal yet) from domain A or B. But for the security groups
only (it works well for users), when I click on "Save" to validate the add of the group to the site permissions, I have the following error:
I have seen a lot of similar issues on the web but no answer so far that work :(
Example: https://social.technet.microsoft.com/forums/sharepoint/en-US/74e8d14b-a0f4-4e21-8cfa-b1a937247160/cant-provision-security-to-old-domain-users
If you have any question that could help you to understand it, do not hesitate.
Thanks a lot in advance for your help ! :)

Can you give the snippet from the ULS log where you're seeing this error?
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Similar Messages

Can multiple users access apps purchased from another Apple ID account?

I have several iMacs under my control. I need to find a way to download iLife using one Apple ID, so I can have all users on each machine to also have access to the updated iLife suite.
Is it possible for other users to access an app that was purchased from another Apple ID. If one purchases an app, does the machine allow access to all the users?
(I know those two last sentences are redundant, but I want to make sure everyone understands problem).
I've read countless articles on this, and can't seem to catch a break from the problem.

If this is in a school of some type or a corporate learning center with multipple Mac computers you should contact Apple directly and ask them for help in getting a version that can be installed on multiple Mac with out have to down the updates to each computer individually.

HT1349 Need help to solve an issue with itunes home sharing. It would started downloading my library from another laptop but would stop for no reason and not show me what still needed downloading or give me the choice to import the data in my library.

please help me i would like to download all my music and movie to a new laptop and have before but for some reason it will not import from another library now. thank you. Kimberly Simmons

please help me i would like to download all my music and movie to a new laptop and have before but for some reason it will not import from another library now. thank you. Kimberly Simmons

Issue using ADSI in powershell to load users from another domain into a group

I am trying to load users into a domain local security group from another domain using ADSI and powershell. For users who have an existing foreign security principal I can load that without issue, but the users who do not have a foreign security principal
I am unable to load.
These work fine, assuming the group domain is fabrikam:
$Group.psbase.invoke("Add",[ADSI]"LDAP://CN=$external_user_sid_who_has_a_FPN,CN=ForeignSecurityPrincipals,DC=fabrikam,DC=com")
$Group.psbase.invoke("Add",[ADSI]"LDAP://$userDN,DC=fabrikam,DC=com")
These does not:
$Group.psbase.invoke("Add",[ADSI]"LDAP://CN=$externaluser_sid_who_does_not_have_a_FPN,CN=ForeignSecurityPrincipals,DC=fabrikam,DC=com")
$Group.psbase.invoke("Add",[ADSI]"LDAP://<SID=$external_user_sid_who_does_not_have_a_FPN>")
$Group.psbase.invoke("Add",[ADSI]"LDAP://<SID=$external_user_hex_sid_who_does_not_have_a_FPN>")
Any help would be greatly appreciated.
Thank you

Thank you for your reply,
I started with that thread and it ultimately recommends using the [ADSI]"LDAP://<SID=$hexsid>, this bind is not working for me. The page it points to for conversion of sid to hexsid is in VBS, but I have used the below powershell to duplicate its function.
$sid = "S-1-5-21-2127521184-1604012920-1887927527-72713"
$parts = $sid.Remove(0,6).Split("-")
foreach ($part in $parts)
$hex = ([Convert]::ToString($part, 16)).ToUpper()
While ($hex.length -lt 8)
$hex = "0" + $hex
for ($i=1; $i -lt 5; $i++)
$reverseEndian = $reverseEndian + $hex.substring($hex.length -2, 2)
$hex = $hex.Remove($hex.length -2, 2)
$hexSid = "0105000000000005" + $reverseEndian
For example SID S-1-5-21-2127521184-1604012920-1887927527-72713 needs
to be turned into raw hex sid 010500000000000515000000A065CF7E784B9B5FE77C8770091C0100 according to that article and
then put in the ADSI bind like this: [ADSI ]"LDAP://<SID=010500000000000515000000A065CF7E784B9B5FE77C8770091C0100>".
When I put that bind in (with an actual sid and not an example sid) I get the following error:
format-default : The following exception occurred while retrieving member "PSComputerName": "There is no such object on
the server.
+ CategoryInfo : NotSpecified: (:) [format-default], ExtendedTypeSystemException
+ FullyQualifiedErrorId : CatchFromBaseGetMember,Microsoft.PowerShell.Commands.FormatDefaultCommand
For users who are on another domain but already have a foreign principal name created, I can add them easily enough by converting their sid to the appropriate foreign principal name format. I haven't yet had any success adding someone who doesn't have a
foreign principal name though, even after trying the solution referenced in the article.
Thank you in advance for any help.

ADF 11g can not select and copy data from cell of readonly table in IE

hi,
In ADF 11g, when render view object as readonly table with Single RowsSelection, using IE browser can not select and copy data from the cell, but it work in firefox.
is it a bug?
Edited by: kent2066 on 2009-5-18 上午8:46

Hi Timo,
Sorry forgot to mention versions.
We are using 11.1.1.7 and IE 9.
I tried in Google but could not get the solution.
Kindly let me know solution for this.
PavanKumar

Set default value for people picker only when user checks a checkbox (Sharepoint 2010)

The javescript in below link works for me.
http://social.technet.microsoft.com/Forums/sharepoint/en-US/2b130f64-3db2-484a-9a53-ccbe18d2c5de/set-default-value-for-people-picker-in-list-template-current-user?forum=sharepointgenerallegacy
However, I'd like to set default user for people picker only when user checks a checkbox.
I am new to development. Could you please help me on this requirement ?
Thank you very much.

Hello,
Use this link to to validate checkbox value, if true then set the person or group value (i.e. as posted in your link).
http://geekswithblogs.net/haniamr/archive/2011/03/10/validate-that-a-checkbox-is-checked-using-javascript.aspx
Hope it could help
Hemendra:Yesterday is just a memory,Tomorrow we may never see
Please remember to mark the replies as answers if they help and unmark them if they provide no help

Difference between Security Oracle user and Security User

Hi All,
Can anyone give me the difference between Security-> Oracle -> user and Security-> User in System Administrator Resp of oracle apps R12.
Thanks,
Mahesh.
Edited by: 991854 on Mar 12, 2013 1:49 AM

Can anyone give me the difference between Security-> Oracle -> user and Security-> User in System Administrator Resp of oracle apps R12.Security > Oracle > Register:
Use this window to register an ORACLE username with Oracle E-Business Suite. An ORACLE username grants access privileges to the ORACLE database
http://docs.oracle.com/cd/E18727_01/doc.121/e12893/T174296T174305.htm
Security > Oracle > Data Group:
A data group defines the mapping between Oracle E-Business Suite products and ORACLE database IDs. A data group determines which Oracle database accounts a responsibility's forms, concurrent programs, and reports connect to. See: Defining Data Groups, Oracle E-Business Suite System Administrator's Guide - Configuration.
http://docs.oracle.com/cd/E18727_01/doc.121/e12843/T156458T156461.htm
Security > User > Define:
Use this window to define an Oracle E-Business Suite user. This user is an authorized user of Oracle E-Business Suite, and is uniquely identified by a username.
http://docs.oracle.com/cd/E18727_01/doc.121/e12843/T156458T156461.htm
Thanks,
Hussein

Browser can resolve, access, and display JPEG image, but ImageIcon can't.

I've got this weird problem that only happens with images accessed through a customer's VPN:
Microsloth Internet Imploder can resolve, access, and display a JPG image from a VPN URL, in the general form:
http://intranet/part?FOOBAR.JPG which the browser apparently transmogrifies into
http://mogrify.foo.com/images/scripts/cgi/detail.cgi?FOOBAR.JPG(as Jack Webb often said, the names have been changed to protect the innocent)
Firefox can also resove, access, and display the image.
But an ImageIcon, when fed either URL, quietly fails to get anything, No errors, no exceptions, but no image, either.
The application, if it detects the failure of ImageIcon to come up with the image, somehow (not my code) defers to "Windoze Image and Fax Viewer," which locks up trying to resolve, access, and display the image.
What could possibly be going on here?

I'd love to have the luxury of saying, "You lost me at Windoze." Then again, to paraphrase a running gag from Airplane!, it looks like I picked the wrong week to quit hemlock.
As my final message on my other thread on this topic indicates, the problem is that even though the URL ends in JPG, the server isn't really serving up a JPEG, but rather, an HTML page containing the JPEG.
Knowing this, a solution (of sorts) presented itself: if the URL doesn't produce a displayable ImageIcon, try constructing a JEditorPane on the URL. The results aren't exactly pretty, and you do have to try the ImageIcon first, but it does work.
JHHL

Hi, I'm a new Mac user and I want 10.8.2 but i can't get that unless I have i have 10.8.1 and I cant get that unless I have 10.8. Now I was wondering if anyone could provide me with a link that would allow me to download this version?

Hi, I'm a new Mac user and I want 10.8.2 but i can't get that unless I have i have 10.8.1 and I cant get that unless I have 10.8. Now I was wondering if anyone could provide me with a link that would allow me to download this version?

Again, that's not a problem - if you purchase Mountain Lion through the App Store, it's been updated to 10.8.2 - and when there are other updates available, you can just download and install them as well.
Just go to the App Store and purchase and install ML. Then run Software Update (Apple menu) to see if there are any updates available for your machine. I keep my System Preferences>Software Update prefs set to check automatically -
Some people would rather check manually. No big deal, just buy it and install it.
Clinton

Can aim users and .mac users video/audio chat with each other?

today was a crazy day with ichat. two of my friends were able to video chat 1 on 1. my mac is qualified to handle 3-way or 4-way chats. when they invite me, the bubble pops up. i hit accept and the loading spindle keeps on spinning for minutes until it just denies me entrance. they get an error saying i never accepted, so as soon as they invite me, they don't get any other response back.
could it be that i am on the AIM network and both of them are on the .mac network?
iMac G5 Mac OS X (10.4.9) 1.8ghz, 1.5gig ram, 3rd party camcorder, latest iChat. router installed.

can aim users and .mac users video/audio chat with each other?
Yes. Apple does not have its own publicly available IM service; iChat uses the AIM network, and there are few functional differences between AIM and .Mac screen names. If they are using a client other than iChat, there may be interoperability issues with audio and video chats, or the other client may not support those types of chatting.
(21228)

MaxL command to import users and security in eas

Hello,
I would like to know if there is a command that allows Maxl export and then import the list of users native EAS and filters.
In summary, I have a few applicationsversion 9 essbase to 11.1.2.2, via migration wizard. my essbase 11 is in standalone mode with SSO configuration to MSAD external authentication. In version 9 essbase security is mounted on the shared services.
My question is, if I take my file essbase.sec version 9 and the copy in version 11, to get my native users and security filters. Will I lose my config sso?.
Thank you in advance
Edited by: 851398 on 25 sept. 2012 09:20

851398 wrote:
My question is, if I take my file essbase.sec version 9 and the copy in version 11, to get my native users and security filters. Will I lose my config sso?.It is probably not adviserable trying to copy your essbase.sec between versions or environments,
You could look at the advanced security manager as an alternative solution to extracting the information, it is free and definitely worth a go - http://www.appliedolap.com/free-tools/advanced-security-manager
Cheers
John
http://john-goodwin.blogspot.com/

I have created a site with iWeb. I have replaced the iWeb Nav bar with a vertical one I made myself. Problem is, my top button disables itself if it overlaps into the "hidden" nav bar area. I can cmd click and drag it into this area, but then all the rest

I have created a site with iWeb. I have replaced the iWeb Nav bar with a vertical one I made myself. Problem is, my top button disables itself (and the animation doesn't work) if it overlaps into the "hidden" nav bar area (indicated by a blue rectangle). I can cmd click and drag it into this area, but then all the rest of my site is pushed down the page. Don't know what to do about this. I don't know how to bring the rest of the page up without dragging it also into the designated nav bar area. Also, by doing this, is it affecting my site in ant way? see my site here at www.steveburrowsimages.com
The home page is with it all draged into the nav bar area and the about page is with is outside the nav bar area (notice that the top button does not animate or work as a button.
Getting confused here. Anyone got any ideas?

Well, you made a good start with SEO by getting rid of the iWeb default navigation since it doesn't help the spiders and, out there in the real world, there are more people than you would think with javascript turned off in their browsers.
One of the downsides of iWeb is that it doesn't allow for the alt attribute in the img tag. Its well worth adding these to give you extra keywords even if you have captioned all your images. Use iWeb SEO Tool for this...
http://www.iwebformusicians.com/Search-Engine-Optimization/Tags.html
iWeb, just like most drag and drop software, creates a huge amount of code which causes the pages to load slowly in the browser. Running you files through an optimizer will help to reduce this problem and further reduce the size of image files even beyond the initial optimization you do before loading them into iWeb...
http://www.iwebformusicians.com/Search-Engine-Optimization/Optimize.html

Can I Copy and Paste text from one Contact to Another on iPhone 3G?

Can I Copy and Paste text from one Contact to Another on iPhone 3G?
Or even better while the iPhone is connected to my PC can I view the address book on the iPhone and make changes using my PC keyboard?
I had a challenge importing from my outlook as it created dual entries for people I had with multiple email addresses or telephone numbers so I need to copy and paste contact info from one to antoher.
Can anyone help?

MCWEB wrote:
Can I Copy and Paste text from one Contact to Another on iPhone 3G?
You will be able to do copy & paste when 3.0 comes out this summer.
Or even better while the iPhone is connected to my PC can I view the address book on the iPhone and make changes using my PC keyboard?
No. You would make changes to the address book on your PC and then sync via iTunes.

HT201441 how can i create and audio cd from a music track I have on my ipod

how can i create and audio cd from a music track I have on my ipod

This is how:
Go to:
'File'
'Share'
'Quicktime'
'Expert Settings'
'Audio as AIFF' or pick your brand of compression.
Drag and drop the resulting file into iTunes.
Enjoy!
P.S. - You didn't need to delete the video but I think that'll be okay.

HT1918 Hi Mrs Gideon ,i just wanna tell you my Bank said i don't have nothing wrong with my card so I think the problem is with my iPhone! So I you can help me and how I'm gonna do to be refund for my money they take on my account( the 9 differents type o

Hi Mrs Gideon ,i just wanna tell you my Bank said i don't have nothing wrong with my card so I think the problem is with my iPhone! So I you can help me and how I'm gonna do to be refund for my money they take on my account( the 9 differents type of 5.96$

I don't know who 'Mrs Gideon' is, but we are fellow users here on these forums, you're not talking to iTunes Support nor Apple.
If you have previously contacted support then you can use the same method that you used last time, and, if you have a case number, include that as well
iTunes Support : http://www.apple.com/support/itunes/contact/ - click on Contact iTunes Store Support on the right-hand side of the page

People Picker can resolve users and security group from another domain but no validation for groups

Similar Messages

Maybe you are looking for