UPS not resolving group membership for domain group

I have two trusted domains A and B in a single forest. We have an AD group groupA in domain A that contains users from both domain A and domain B. SharePoint is installed in domain A. However, after UPS is run, when looking at the the group in the audience
setting, you see that the membership count only reflects the members of domain A but not in domain B. The AD permissions for Directory replication is set correctly.
So in summary-
Domain A and Domain B (Full Trust)
SharePoint in Domain A
GroupA in Domain A with 5 users from Domain A and 12 users from Domain B
Post UPS import in audience setup, group only shows membership count as 5 instead of 17
Users from both Domain A and Domain B show up in the User Profiles
Is this a known limitation? or is something wrong?

did you configure the people picker
http://technet.microsoft.com/en-us/library/gg602075(d=lightweight,v=office.14).aspx#section4
http://jaredmatfess.wordpress.com/2013/02/26/sharepoint-2010-people-picker-is-having-a-hard-time-finding-people/
Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog
No need to configure the People Picker in a full trust between domains of the same forest.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Similar Messages

Have been here before but still have not resolved a fix for a black screen when I try to access a PDF file...Now I've got a new iPad and need the User Guide which is only available inPDF

Have been here before but still have not resolved a fix for a black screen when I try to access a PDF file using Safari...Now I've got a new iPad and need the User Guide which is only available in PDF and FireFox will not work.

Hello,
'''Try Firefox Safe Mode''' to see if the problem goes away. Safe Mode is a troubleshooting mode, which disables most add-ons.
''(If you're not using it, switch to the Default theme.)''
* On Windows you can open Firefox 4.0+ in Safe Mode by holding the '''Shift''' key when you open the Firefox desktop or Start menu shortcut.
* On Mac you can open Firefox 4.0+ in Safe Mode by holding the '''option''' key while starting Firefox.
* On Linux you can open Firefox 4.0+ in Safe Mode by quitting Firefox and then going to your Terminal and running: firefox -safe-mode (you may need to specify the Firefox installation path e.g. /usr/lib/firefox)
* Or open the Help menu and click on the '''Restart with Add-ons Disabled...''' menu item while Firefox is running.
[[Image:FirefoxSafeMode|width=520]]
''Once you get the pop-up, just select "'Start in Safe Mode"''
[[Image:Safe Mode Fx 15 - Win]]
'''''If the issue is not present in Firefox Safe Mode''''', your problem is probably caused by an extension, and you need to figure out which one. Please follow the [[Troubleshooting extensions and themes]] article for that.
''To exit the Firefox Safe Mode, just close Firefox and wait a few seconds before opening Firefox for normal use again.''
''When you figure out what's causing your issues, please let us know. It might help other users who have the same problem.''
Thank you.

IDOC for domain function

Hi,
I am looking for some IDOC for the creation of domain function .
(Transaction FM_FUNCTION, table TFKB)
I have not find any yet, do you know how can i fine the IDOC or maybe it does not exist any IDOC for domain function?
Thank you,
Regards,
Zheng

Function modules for converting SAP codes Domain Function module Currency keys CURRENCY_CODE_SAP_TO_ISO Country keys COUNTRY_CODE_SAP-TO_ISO Units of measure UNIT_OF_MEASURE_SAP_TO_ISO Shipping instructions SAP_TO_ISO_PACKAGE_TYPE_CODE I recommend that you encapsulate the code in a SUBROUTINE <SEGMENT-TYP>_CODES_SAP_TO_ISO.

Windows Server 2008 - Group policy for domain client to start/stop services installed on it

Hello Experts
I am a newbie to windows server administration , though did a Google , but ended up with these question with my requirements
I have created a new domain and 2 client/computer (A & B namely) to domain . Now A & B has tomcat server running with port 8080 , 9090 which i have installed
domain ADMIN account .
&& now i am want to start/stop/restart services enabled for domain users !! How do i achieve this !!
basic question : How can i access A & B tomcat services on DOMAIN CONTROLLER server to create a GPO and that are on (A & B)
what is the easiest way to achieve the same , (if not using GPO)???
similarly I am looking for many features : where I want to control the permission to user on (A & B ) like : If the binaries of tomcat is available on machine say : A , if the user can install (now
it ask for ADMIN credentials)
Thanks
Mike~Ed

Controlling services with Group Policy is done under Computer Configuration\Policies\Windows Settings\Security Settings\System Services.
The limitation is that system services can only see the services the computer running the Group Policy management console. To access other services, you will either need to create the services on your computer (install the software the adds the service)
or install the remote server administration toolkit (RSAT) on the computer with the service already on it.
If my answer helped you, check out my blog:
Deploy Happiness

Remove Send-As for domain admin groups

With referring to below link.
http://social.technet.microsoft.com/Forums/exchange/en-US/d2e97e64-536a-4c46-8e57-e0ac6a4ad64e/how-do-i-remove-domain-admins-send-as-settings-for-all-users?forum=exchangesvradminlegacy
The solution work perfectly for normal user but for user whose member of Domain Admin as well, the send-as will revert back from Deny to Allow after a while.
I have a user who member of domain admins group, say User A. Since we want to remove the send as for all users (including User A), I did followed the steps, Denied Send-As for Domain Admins group for User A.
However, after for while it return back to Allow.

The permissions on members of special groups is managed by the AdminSDHolder and SDProp.
http://technet.microsoft.com/en-us/magazine/2009.09.sdadminholder.aspx
The way to deal with this is to give your domain admins (and any other admins) a separate account and to remove their "normal" account from any privileged groups (and to reset the adminCount property and "allow inheritance" on the "normal" account). Do NOT
give the admins a mailbox.
If you can't do that, then deny the Domain Admins group the "Send As" and "Receive As" permission at the organization level in the AD's configuration container. Use ADSIEDIT to do that here:
CN=<Organization>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<domain>,DC=<tld>
--- Rich Matheisen MCSE&I, Exchange MVP

Get-AdGroupMember -recursive doesn't return membership for some nested groups.

I have the following setup:
Test Parent Group (Group)
- John Doe (User)
- Domain Users (Group, contains 1000s of users)
When I call: Get-AdGroupMember "Test Parent Group" -recursive
Only John Doe is returned.
Thoughts?

First, it seems that Get-ADGroupMember in a recursive mode does not return object with the class group. So only the actual members are returnd not the groups.
Second, with the -recursive, Get-ADGroupMember reads the member attribute of each nested groups. Users are not a member of Domain Users through the member attribute but through the primaryGroupID attribute. Thus you list the members of Domain Users if you
target it directly Get-ADGroupMember -Identity "Domain Users" but not when this one is nested. I don't know if there is a documentation about this.
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

ODI not writing group by function for xmlagg

Hi all
i have a requirement to create xml file the query is in the target columns are follows
first column deptno
second column xmlserialize(content
xmlagg(xmlelement("emp", xmlattributes(empno as "id", ename AS "name" )
)) as nclob indent
i expect the out put query as
select deptno
        , xmlserialize(content
             xmlagg(
               xmlelement("emp",
                 xmlattributes(empno as "id", ename as "name")
             as clob indent
   from scott.emp
   group by deptno ;but ODI is not writing group by for xmlagg instead the code generated is
select deptno
        , xmlserialize(content
             xmlagg(
               xmlelement("emp",
                 xmlattributes(empno as "id", ename as "name")
             as clob indent
   from scott.emp;can any one help me how to put group by for the column. it should automatically write group by for aggregate columns like max min. not in case of xmlagg.

Hi
changed my Ikm settings
<%=odiRef.getGrpBy()%>
replaced with
<% out.print("GROUP BY " + odiRef.getColList("", "[EXPRESSION]", ",", "", "UD1")); %>
marked deptno as UD1 and insert/update and it worked....

How to see the group membership for a user in oidadmin

how to see the group membership for a user in oidadmin?
I see the memberships in oiddas, but I would like to know if its possible to see them in oidadmin? Thanks.

Hi,
For what I understand, you know the user and want to know the groups that the user is member of (am i wrong?)...
With this query you pass the user's DN to the ldapsearch and the search gives you back the list of groups the member is a member of, all you need to do is change the value "uniquemember=cn=orcladmin" in the query for your own user.
For example:
$ORACLE_HOME/bin/ldapsearch -h localhost -p 389 -D "cn=orcladmin" -w oracle10g -b "dc=acme,dc=com,dc=au" -s sub "uniquemember=cn=orcladmin" dn
will give you the list of groups that the user "cn=orcladmin" is a member of.
$ORACLE_HOME/bin/ldapsearch -h localhost -p 389 -D "cn=orcladmin" -w oracle10g -b "dc=acme,dc=com,dc=au" -s sub "uniquemember=cn=smithj,cn=Users,dc=acme,dc=com,dc=au" dn
will grive you all the groups that the user smithj is a member of.
if you don't want to get the DN of the group you can change the last parameter of the query like this
$ORACLE_HOME/bin/ldapsearch -h localhost -p 389 -D "cn=orcladmin" -w oracle10g -b "dc=acme,dc=com,dc=au" -s sub "uniquemember=cn=smithj,cn=Users,dc=acme,dc=com,dc=au" cn
will give you the CN of the groups the user is member of.
let me know if this is what you need.
Regards,
Juan

How to Force JHS do not generate navigation cases for Groups?

Hello
I have already seen "Overwrite faces-config and navigation rules " property for Group in JhsApp deff .But It does not work .How Force JHS do not generate navigation cases for Groups? and another question is that how can I customize navigation case generation in JheadStart?
Thanks

Hi,
You are right: the navigation rules in the main faces-config file are overwritten, even if you uncheck these flags. Here is the solution:
If you want to preserve some of the navigation rules in the main faces config: alter the velocity template for faces-config. You can only switch off the entire generation of faces-config.xml; not individual parts.
If you want to add a special navigation rule: add it to the group faces config file.
If you want to preserve post-generation changes to the group faces config file: uncheck 'generate controller group?' or put it in the templates for that group.
Note: the flag 'Overwrite Faces-Config beans and Navigation Rules?' has become obsolete, you should only use 'Generate Controller Group?'.
Regards,
Evert-Jan de Bruin
JHeadstart Team

Impact of solution of ORA-00979: not a GROUP BY expression in Oracle11g R2

Hi,
We have a query which is working in 10g and giving error "ORA-00979: not a GROUP BY expression" in Oracle11g R2 (11.2.0.3). we have found following two solution to resolve it from the internet.
1)You can Set the hidden parameter “_FIX_CONTROL”=’5520732:OFF’ in the pfile. This parameter disables a given bug number.
2)We can set the parameter optimizer_features_enable to a previous version of Oracle, ’11.1.0.7′
but I am unable to find the side effects of above change, so I need to know:
1)whcih is batter solution
2)what are the possible side effects of both solution.

Hi,
1: The fix for the fix of bug 5520732 is already solved in 11.2, so this won't help
2: This can cause performance, suboptimal plans and losing lot of features from 11.2
The third option is always the best in this case, rewrite the query. There is an error in the SQL, so fix that one. It is just one query, so it wouldn't be to hard. The group by items are possibly out of sync with the select items.
Herald ten Dam
http://htendam.wordpress.com

Cisco ISE with AD Problem: "Could not read groups data: Global catalog not found"

Hi all,
When I make the ActiveDirectory integration with Cisco ISE, I have complete with this integration. but when I try to read the Groups from Active Directory, ISE shows the message "Could not read groups data: Global catalog not found".
My Domain has multiple sites and subnets, each contains GC for local logon. I have set ISE to the correct site and subnet. Forward and Reverse DNS are working with no error.
Does anyone get this problem, please help.
I have check into the ISE CLI Reference Guide 1.1.x
You are about to configure Active Directory settings.
Are you sure you want to proceed? y/n [n]: y
Parameter Name: dns.servers
Parameter Value: 10.77.122.135
Active Directory internal setting modification should only be performed if approved by ISE
support. Please confirm this change has been approved y/n [n]: y
What shoud I set in the Parameter Name ? dns.servers or my dns hostname ?
Please suggest for this too.
Thanks and Regards,
Pongsatorn M.

Hi Pongsatorn,
Thanks for the reply!
I've attached the results of the ISE detailed AD test. As you can see, there is a fair number of domain controllers in the AD forest.
It seems everything works correctly until it gets to testing the AD connectivity on port 3268. Then I get this:
Testing Active Directory connectivity:
    Global Catalog: pdascdc02.xyz.com
      gc:       3268/tcp - refused
Testing Active Directory connectivity:
    Global Catalog: pdascdc02.xyz.com
      gc:       3268/tcp - refused
For some reason, the request to the controllers on port 3268 is being refused.
Any thoughts you might have are greatly appreciated.
Cheers,
Greg

Ora-00979 not a group by expression

hi , how r u ?
my problem in group by , how include subquery in group by ,
this query give me error ora-00979 not a group by expression ,
please help me in this query :
select EVV_CompScale.Code CompCode,ScaleCode ,NameEn,NameAr,RatingChar ,count(EV_CompetencyEmployee.Code) as VoteCount ,
coalesce((select count(EV_CompetencyEmployee.code) from EV_CompetencyEmployee join EV_EmployeeEvaluation tblEV on EV_Code=tblEV.Code and EmployeeApprovalCMP=1 and DirectManagerApprovalCMP=1 and SeniorManagerApprovalCMP=1 and tblEV.configCode='K' where CompetencyCode=EVV_CompScale.Code and not RatingID is null ),1) as Total
from EVV_CompScale left join (EV_CompetencyEmployee join EV_EmployeeEvaluation on EV_Code=EV_EmployeeEvaluation.Code and EmployeeApprovalCMP=1 and DirectManagerApprovalCMP=1 and SeniorManagerApprovalCMP=1 and EV_EmployeeEvaluation.configCode='K') on EV_CompetencyEmployee.CompetencyCode=EVV_CompScale.Code and RatingID=ScaleCode where CompConfig='K'
and ScaleConfig='K' group by EVV_CompScale.Code,ScaleCode,RatingChar,NameEn,NameAr
order by CompCode .
thanks .

Hi,
In a GROUP BY querry, every item in the SELECT list must be one of the following
(1) One of the GROUP BY expressions
(2) An aggregate function
(3) A constant
(4) Deterministic expressions based on the above (for example, COALESCE, where all the arguments are taken from the list above)
So if your scalar sub-query is going to be part of the GROUP BY query, it has to fit into one of those categories
I don't see any good way of convincing the compiler that your scalar sub-query is a constant, even if it happens to rturn a constant value, but you can make it either
(1) one of the GROUP BY expressions (compute it in a sub-query, to avoid repeating the whole scalar sub-query in the GROUP BY clause), or
(2) an aggregate function ( e.g. MAX ((SELECT ...))).
But the scalar sub-query doesn't have to be part of the GROUP BY query. Depending on your tables and the desired results, it might be easy to do the GROUP BY and what is now the scalar sub-query separately, and then join the two result sets.
If you need help, it always helps to post:
(1) The version of Oracle (and any other relevant software) you're using
(2) A little sample data (just enough to show what the problem is) from all the relevant tables
(3) The results you want from that data
(4) Your best attempt so far (formatted) (You posted this, but since it's unformated, it's very hard to read.)
(5) The full error message (if any), including line number
Executable SQL statements (like "CREATE TABLE AS ..." or "INSERT ..." statements) are best for (2).
Formatted tabular output is okay for (3). Type these 6 characters:
{code}
(small letters only, inside curly brackets) before and after formatted text, to preserve spacing.
Simplify the problem if you can. For example, if your real query involves many columns and many join conditions, try to post a similar problem that has few columns and very siomple join conditions, but has the same problem as your real query.

Have a gap in detail of first page and not display group footer on each pag

Please help me about Memo field in SubReport in CrystalReportXI. I have a SubReport that need to display pageheader, detail, page footer, and in detail of subreport contains memo field and set the property of this text box to "Can Grow" = Yes .However, CrystalReportX does not support to display pageheader, pagefooter in SubReport. So. I have created a formular FakePageHeader that has code as
"WhileReadingRecords;
true"
and group in this field and checked option repeat group header on each page and right click Section Expert->check print at Bottom of page for Group Footer.
This problem is when I preview Subreport. It display text in group header and a gap in detail of first page and view next page, the subreport display right data of memo field. But the report still not display group footer on each page.
How do I can remove a gap in first page and display group footer on each page?
Thanks

in subreport in format for the memo field uncheck keep object together.
You can not force group footers to repeat on each page.
I have not tried this but you might be able to capture the data you want to show in SR page footer and display in main report page footer, using shared variables.
Ian

ACL migration Error : 1210 could not find a domain controller for domain "Test Domain" (Old Domain)

Hi
We are migrating from old domain to new domain. Before live migration, we are trying to check the ACE/ACL migration through SubInACL. We are running the SubInACL on a cluster, which is a member of the Old Domain (Test Domain). We are able to resolve and
ping both Old Domain and the New domain from this cluster machine. We have created a network share on this cluster, which is accessible to all Domain Users of the Old Domain. Both Domains have two way forest level trust. we are trying to migrate
the ACL of this share (\\ClusterMachine\testshare$) to the new domain using SubInACL. We are trying to run the below command to get it done.
subinacl /outputlog=C:\Users\Administrator\Desktop\Migrationlog.txt /subdirectories
\\ClusterMachine\testshare$\*.* /migratetodomain=OldDomain=NewDomain=mappingfile.txt
Mapping file contains : Domain Users=NewDomain_Users
But we are geeting the Error that "1210 could not find a domain controller for domain "Test Domain". Error finding domain name : 1210 the format of the specified computer name is invalid. Current Object "\\ClusterMachine\testshare$"
will not be processed."

Hello,
how in detail is DNS set up in each domain?
Any problems when using nslookup to verify?
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://blogs.msmvps.com/MWeber
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
Twitter:

Getting "ORA-00979: not a GROUP BY expression" error in Inline query

Hello all,
The following query when run in SCOTT user gives "ORA-00979: not a GROUP BY expression" error.
If I remove the TRUNC function from the outer query's group by clause, then it fetches
(My actual query is something similar to the following query. I have given emp, dept tables for convenience's sake)
select e.empno,e.ename, AVG(e.SAL), trunc(e.hiredate),
(select sum(sal) from emp
where hiredate = e.hiredate) salary
from emp e
group by e.DEPTNO,e.EMPNO,e.ENAME, trunc(e.hiredate)
Pls suggest how this error can be avoided.
Regards,
Sam

Why not this?
satyaki>
satyaki>select * from v$version;
BANNER
Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Prod
PL/SQL Release 10.2.0.1.0 - Production
CORE    10.2.0.1.0      Production
TNS for Linux: Version 10.2.0.1.0 - Production
NLSRTL Version 10.2.0.1.0 - Production
Elapsed: 00:00:00.02
satyaki>
satyaki>
satyaki>select e.empno,
2         e.ename,
3         AVG(e.SAL),
4         trunc(e.hiredate),
5        (
6           select sum(sal)
7           from emp
8           where hiredate = e.hiredate
9        ) salary
10 from emp e
11 group by e.DEPTNO,
12           e.EMPNO,
13           e.ENAME,
14           e.hiredate;
     EMPNO ENAME      AVG(E.SAL) TRUNC(E.H     SALARY
      7934 MILLER         1887.6 23-JAN-82     5583.6
      7698 Glen             1848 23-JAN-82     5583.6
      7788 SCOTT          598.95 19-APR-87     598.95
      7900 JAMES          1379.4 03-DEC-81    6650.16
      7521 WARD           226.88 22-FEB-81     226.88
      7599 BILLY            4500 10-JUN-09       4500
      2222 sp               1200 14-SEP-09       1200
      7902 FORD          5270.76 03-DEC-81    6650.16
      7566 Smith            1848 23-JAN-82     5583.6
      7654 MARTIN           1815 28-SEP-81       1815
      7839 KING             7260 17-NOV-81       7260
     EMPNO ENAME      AVG(E.SAL) TRUNC(E.H     SALARY
      7844 TURNER           2178 08-SEP-81       2178
      7876 ADAMS          159.72 23-MAY-87     159.72
13 rows selected.
Elapsed: 00:00:00.03
satyaki>Regards.
Satyaki De.

UPS not resolving group membership for domain group

Similar Messages

Maybe you are looking for