MOD2000: Offline Replication Breaks with Windows 2000 Domain

• Microsoft Office 2000 Developer

SYMPTOMS

After installing Access Workflow Designer and its related supporting software (including Microsoft SQL Server), you may experience offline replication problems, or you may receive the following error message when you use Windows NT Integrated security with Microsoft Windows 2000 on your domain controllers:

Could not obtain information about Windows NT group/user "<user or group account>"

CAUSE

This problem occurs because Microsoft Windows cannot determine if the underlying user accounts or groups have the appropriate offline replication permissions. To determine if a user or group has the appropriate permissions for use with offline replication, the operating system enumerates the groups the user or users belong to. Without the ability to enumerate groups, the operating system cannot determine if the person attempting to create or use offline replication has the appropriate permissions.

RESOLUTION

To fix this problem, do one of the following:

• Put the appropriate user account or accounts in a second-tier domain, and place the machine account in the main domain controller domain.



• Add the Microsoft SQL Server administrator to the Windows NT Administrators group.



• Add the specific users or groups to the "Pre-Windows 2000 Compatible Access" group. Then, run the fixlegcy utility on all domain controllers and allow this change to propagate to all domain controllers.

Additional query words: pra controller setuser authentication failure information

Keywords : kbdta modWFDesigner
Version : :
Platform :
Issue type : kbbug