AD and GroupMembershipSAM

[am]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Hello,
I'm trying to install IBM MQ 5.3 on Windows 2003. From the READ.ME of
that software:

To set Read GroupMembershipSAM:

1.Open Active Directory Users & Computers
2.Put Active Directory Users & Computers in Advanced Features Mode
3.Find the 'domain mqm' in the left panel, right click it and select
Properties.
4.Select the Security Tab.
5.Select Advanced, then click Add, type in 'domain mqm' and click OK.
6.A new dialog will be displayed. Select the properties Tab. In the
'Apply onto' box change the view to 'User objects'.
7.Select the allow checkbox for 'Read Group Membership' and 'Read
GroupMembershipSAM'.
8.Click 'OK' to close all windows (Should be 3 times).

The 'domain mqm' group now has the rights to enumerate the group
membership for
all users in that domain

The problem is that when I don't see the options 'Read Group
Membership' and 'Read GroupMembershipSAM' under the 'User Objects'
tab.

Any idea why? and Idea hoe to set those options?.

Thanks a lot

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Hi..

In order to access these attributes you will need to modify the
filtering settings on the AD Users & Computers mmc.. This controls
which attributes are visible..

See the following MS link for a proper explaination....

http://support.microsoft.com/?kbid=296490

Cheerio
Gary Simmons

gsimmons.uk@gmail.com


On 4 Jan 2005 14:27:55 -0800, mtz_e@yahoo.com (AM) wrote:

>Hello,
>I'm trying to install IBM MQ 5.3 on Windows 2003. From the READ.ME of
>that software:
>
>To set Read GroupMembershipSAM:
>
>1.Open Active Directory Users & Computers
>2.Put Active Directory Users & Computers in Advanced Features Mode
>3.Find the 'domain mqm' in the left panel, right click it and select
> Properties.
>4.Select the Security Tab.
>5.Select Advanced, then click Add, type in 'domain mqm' and click OK.
>6.A new dialog will be displayed. Select the properties Tab. In the
> 'Apply onto' box change the view to 'User objects'.
>7.Select the allow checkbox for 'Read Group Membership' and 'Read
> GroupMembershipSAM'.
>8.Click 'OK' to close all windows (Should be 3 times).
>
>The 'domain mqm' group now has the rights to enumerate the group
>membership for
>all users in that domain
>
>The problem is that when I don't see the options 'Read Group
>Membership' and 'Read GroupMembershipSAM' under the 'User Objects'
>tab.
>
>Any idea why? and Idea hoe to set those options?.
>
>Thanks a lot