MDM Does not Display Object ACEs after Install of ADSI 2.5

ID: Q224924


The information in this article applies to:
  • Microsoft Site Server version 3.0
  • Microsoft Active Directory Service Interfaces, version 2.5


SYMPTOMS

The Membership Directory Manger (MDM) in the Microsoft Management Console (MMC) does not display membership object ACEs after installing ADSI 2.5.


CAUSE

Site Server 3.0 does not advertise the fact that it accepts the LDAP security descriptor control, so ADSI 2.5 doesn't send it. ADSI 2.5 was changed to avoid two round trips each time for servers that don't support this control.

This worked with ADSI 2.0 because ADSI 2.0 always sends the control and if the server complains, ADSI 2.0 sends a request again without the control.


RESOLUTION

To resolve this problem, obtain the latest service pack for Site Server 3.0. For additional information, please see the following article in the Microsoft Knowledge Base:

Q219292 How to Obtain the Latest Site Server 3.0 Service Pack


STATUS

This problem was first corrected in Site Server 3.0 Service Pack 3.


MORE INFORMATION

Site Server was changed to advertise the fact that it handles the LDAP security descriptor control.

Additional query words: ACE

Keywords : SS3SP3Fix
Version : winnt:2.5,3.0
Platform : winnt
Issue type : kbbug


Last Reviewed: October 26, 1999
© 2000 Microsoft Corporation. All rights reserved. Terms of Use.