You are not logged in. [Log In] KiXtart.org website » Forums » KiXtart » Beta » Windows 7 RC & Kix & Globabl Groups
Register User       Forum List       Calendar       FAQ
Page 1 of 2 12>
Topic Options
#193933 - 2009-05-19 03:25 PM Windows 7 RC & Kix & Globabl Groups
bobba Offline
Fresh Scripter

Registered: 2004-09-10
Posts: 16
Loc: UK
I'm trying out Windows 7 RC in our work environment and I've hit a problem with group enumeration straight away. It seems to be unable to enumerate my global group membership. It seems to work with domain locals fine.

Any ideas?

(I've tried /f)
(we have a windows 2000 AD)

Thanks

Rob

Edited by bobba (2009-05-19 03:26 PM)
Top
#193937 - 2009-05-19 06:46 PM Re: Windows 7 RC & Kix & Globabl Groups [Re: bobba]
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11624
Loc: CA
What version of KiXtart are you using and did you run your script with elevated permissions?

Please post and example of your code and let us know what version of KiX you're using.
Top
#193947 - 2009-05-20 11:01 AM Re: Windows 7 RC & Kix & Globabl Groups [Re: NTDOC]
bobba Offline
Fresh Scripter

Registered: 2004-09-10
Posts: 16
Loc: UK
I've tried 4.60.and 4.61

My client OS is windows 7 RC 7100, our AD is Windows 2000 SP4 with all current updates.

Same results when run normally or run as administrator.

The OS itself must be recognising my global group memberships as I can access shares etc.

I've tried several variations of script but basically doing a query for global group membership returns no and enumerating all group membership returns only domain local groups.

Script example:
if ingroup ("GG-ITS-Users")
? "Yes"
Else
? "No"
EndIf

Script example:
$Index = 0
DO
$Group = ENUMGROUP($Index)
$Index=$Index+1
? $Group
UNTIL Len($Group) = 0
get $anykey
Top
#193948 - 2009-05-20 11:17 AM Re: Windows 7 RC & Kix & Globabl Groups [Re: bobba]
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11624
Loc: CA
Please try version 4.53 and see if you still have the same issue or not.
Top
#193949 - 2009-05-20 11:22 AM Re: Windows 7 RC & Kix & Globabl Groups [Re: NTDOC]
bobba Offline
Fresh Scripter

Registered: 2004-09-10
Posts: 16
Loc: UK
Thanks for the suggestion, I've just tried 4.53 and I get the same results either as a standard user or elevated as an admin.
Top
#193950 - 2009-05-20 11:24 AM Re: Windows 7 RC & Kix & Globabl Groups [Re: bobba]
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11624
Loc: CA
Okay, I'll try it tomorrow at work on my Windows 7 RC 64 Bit system and let you know what I get.

My network is AD 2003 in Native mode.
Top
#193951 - 2009-05-20 11:50 AM Re: Windows 7 RC & Kix & Globabl Groups [Re: NTDOC]
bobba Offline
Fresh Scripter

Registered: 2004-09-10
Posts: 16
Loc: UK
Thankyou for your help
Top
#193952 - 2009-05-20 11:56 AM Re: Windows 7 RC & Kix & Globabl Groups [Re: bobba]
bobba Offline
Fresh Scripter

Registered: 2004-09-10
Posts: 16
Loc: UK
A colleague uses Vista and when he runs the same script he gets both the globals and domain locals listed as "domain\group"

When I get the listing of domain locals it is without "domain\"
Top
#193981 - 2009-05-20 11:59 PM Re: Windows 7 RC & Kix & Globabl Groups [Re: bobba]
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11624
Loc: CA
Well I seem to have the same issue on my Windows 7 RC 64 Bit as well on my AD 2003 network. InGroup not finding proper group membership.

Not sure why, didn't try to do any network traces on it.
Top
#193986 - 2009-05-21 11:47 AM Re: Windows 7 RC & Kix & Globabl Groups [Re: NTDOC]
bobba Offline
Fresh Scripter

Registered: 2004-09-10
Posts: 16
Loc: UK
Thanks for trying it, any suggestions as to where to go from here?
Top
#193992 - 2009-05-22 12:34 AM Re: Windows 7 RC & Kix & Globabl Groups [Re: bobba]
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11624
Loc: CA
Well unless Ruud comes out with an update not much else you can do with KiXtart. Not as easy but PowerShell is coming on strong with Microsoft.


I mean natively, but like PowerShell you can use calls to ADSI or WinNT provider to maybe make those calls instead of internally to KiX.
Top
#194811 - 2009-07-15 08:37 PM Re: Windows 7 RC & Kix & Globabl Groups [Re: bobba]
KIXKicks Offline
Starting to like KiXtart

Registered: 2002-07-26
Posts: 177
Loc: Vancouver, WA
We use FNINGROUPAD UDF for Vista 64-Bit Computers...haven't tried it with Windows 7 yet.
Top
#195526 - 2009-08-22 01:21 PM Re: Windows 7 RC & Kix & Globabl Groups [Re: bobba]
Ruud van Velsen Moderator Offline
Developer
*****

Registered: 1999-05-06
Posts: 391
Loc: Amsterdam, The Netherlands
Hi there,

thanks for this report. I tested this on my x64 Win7 RC1 and haven't been able to repro the issue yet. If one of the group enumeration API's fails, for whatever reason, KiXtart should log an entry in the event log.

Can you check your eventlogs to see if any errors were logged?

Ruud
Top
#195579 - 2009-08-25 02:57 PM Re: Windows 7 RC & Kix & Globabl Groups [Re: Ruud van Velsen]
bobba Offline
Fresh Scripter

Registered: 2004-09-10
Posts: 16
Loc: UK
Hi Ruud,

Just noticed your reply. The error in the vent log is:

Failed to resolve SID(s) Error : The trust relationship between this workstation and the primary domain failed. (0x6fd/1789)

I'm running W7 RTM x86 and our AD is Windows 2000 based. The PC works fine with exchange, file shares and all other domain functions so I'm not aware of how it could be a PC issue.

Any help greatly appreciated.

Note:
I've checked the Default Domain Controller Policy and the default groups have access this computer from the network rights:

Administrators
Authenticated Users
Everyone

As per KB262958
Top
#195580 - 2009-08-25 03:20 PM Re: Windows 7 RC & Kix & Globabl Groups [Re: bobba]
Allen Administrator Offline
KiX Supporter
*****

Registered: 2003-04-19
Posts: 4549
Loc: USA
It's funny, I googled the error and the first link pointed right back to the korg forums. Check out these links and see if they help.

http://www.kixtart.org/forums/ubbthreads.php?ubb=showflat&Number=121076&site_id=1#import
http://support.microsoft.com/default.aspx?scid=kb;en-us;262958
Top
#195582 - 2009-08-25 03:22 PM Re: Windows 7 RC & Kix & Globabl Groups [Re: Allen]
Allen Administrator Offline
KiX Supporter
*****

Registered: 2003-04-19
Posts: 4549
Loc: USA
Okay... I don't remember seeing the bottom of your post regarding the groups... nevermind.
Top
#195583 - 2009-08-25 03:24 PM Re: Windows 7 RC & Kix & Globabl Groups [Re: bobba]
Mart Moderator Offline
KiX Supporter
*****

Registered: 2002-03-27
Posts: 4673
Loc: The Netherlands
Don’t think that this is a kix issue.

I've seen some people removing the computer from the domain, renaming it and joining it to the original domain they were in. In some cases this fixed the issue.
_________________________
Mart

- Chuck Norris once sold ebay to ebay on ebay.

Top
#195608 - 2009-08-26 11:00 AM Re: Windows 7 RC & Kix & Globabl Groups [Re: Mart]
bobba Offline
Fresh Scripter

Registered: 2004-09-10
Posts: 16
Loc: UK
I've tried removing and re-adding. renaming and re-adding with the same result. I think you're right that it's not a kix issue as I get this in the winlogon.log:

----Configure Group Membership...
Configure Administrators.
Error 1789: The trust relationship between this workstation and the primary domain failed.
Error occurred during lookup of all accounts.
Group Membership configuration was completed with one or more errors.

Given that the Default Domain Controller Policy contains Authenticated Users and Everyone I can't understand what the problem is.
Top
#195609 - 2009-08-26 11:08 AM Re: Windows 7 RC & Kix & Globabl Groups [Re: bobba]
bobba Offline
Fresh Scripter

Registered: 2004-09-10
Posts: 16
Loc: UK
Running nltest returns:

C:\Windows\system32>nltest /sc_verify:mydomain /server:mypc
Flags: b0 HAS_IP HAS_TIMESERV
Trusted DC Name \\mydc.mydomain.local
Trusted DC Connection Status Status = 0 0x0 NERR_Success
Trust Verification Status = 0 0x0 NERR_Success
The command completed successfully
Top
#195610 - 2009-08-26 02:35 PM Re: Windows 7 RC & Kix & Globabl Groups [Re: bobba]
Ruud van Velsen Moderator Offline
Developer
*****

Registered: 1999-05-06
Posts: 391
Loc: Amsterdam, The Netherlands
This is almost surely "something" to do with the configuration of the permissions in AD. Have you checked http://support.microsoft.com/default.aspx?scid=kb;en-us;262958 to see if that helps?

Ruud
Top
Page 1 of 2 12>


Moderator:  ShaneEP, Arend_, Jochen, Radimus, Glenn Barnas, Allen, Ruud van Velsen, Mart 
Hop to:
Shout Box

Who's Online
0 registered and 920 anonymous users online.
details
Newest Members
Timothy, Jojo67, MaikSimon, kvn317, kixtarts2025
17874 Registered Users
My Cookies · Mark all read Powered by UBB.threads™ Contact Us · KiXtart.org website · Top

Generated in 0.077 seconds in which 0.027 seconds were spent on a total of 12 queries. Zlib compression enabled.