the specified domain either does not exist or could not be contacted when accessing member of tab for user
-
Thursday, April 28, 2011 3:57 PM
I am a domain administrator for my domain and I'm having a weird problem when I try to access the "member of" tab for my user account. It also happens when I try to access the "member of" tab for the user account of the other domain administrator we have. I get an error that says "the specified domain either does not exist or could not be contacted". As far as I can tell I am able to access the "member of" tab for any other user account in the directory.
Any ideas as to why this would happen only for these two user accounts? Pretty sure I used to be able to do this without any problems.
All Replies
-
Thursday, April 28, 2011 5:57 PMdoes this happen on any dc you try this on or you tried it just on one?
-
Thursday, April 28, 2011 7:42 PM
Is this user member of a group from a trusted domain? If so, can you access the GC of this trusted domain?
Santhosh Sivarajan | MCTS, MCSE (W2K3/W2K/NT4), MCSA (W2K3/W2K/MSG), CCNA, Network+ Houston, TX
Blogs - http://blogs.sivarajan.com/
Articles - http://www.sivarajan.com/publications.html
Twitter: @santhosh_sivara - http://twitter.com/santhosh_sivara
This posting is provided AS IS with no warranties,and confers no rights. -
Thursday, April 28, 2011 7:46 PM
Also, can you see the “member of” result using the following command?
dsget user "CN=Test1,OU=Users,DC=santhosh,DC=lab" -memberof
Santhosh Sivarajan | MCTS, MCSE (W2K3/W2K/NT4), MCSA (W2K3/W2K/MSG), CCNA, Network+ Houston, TX
Blogs - http://blogs.sivarajan.com/
Articles - http://www.sivarajan.com/publications.html
Twitter: @santhosh_sivara - http://twitter.com/santhosh_sivara
This posting is provided AS IS with no warranties,and confers no rights. -
Thursday, April 28, 2011 9:01 PM
It only happens when using Remote Administration Tools - Active Directory Users and Computers (snapin) on my Windows 7 client. It happens regardless of which DC I point the snapin to. If I remote desktop to a DC it works just fine.
I also tried the dsget user command from my client and that actually works fine.
-
Thursday, April 28, 2011 9:30 PM
Hello,
is RSAT installed after SP1 on Windows 7, if yes was it the SP1 version from RSAT?
Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. -
Friday, April 29, 2011 3:27 AMModerator
Hi,
I would like to suggest you temporarily disable Windows Firewall and third party security program to test the issue. For more information, please refer to the following Microsoft KB article:
How to configure a firewall for domains and trusts
http://support.microsoft.com/kb/179442
In addition, please also make sure that the DNS and WINS settings on the clients are correctly printed to the DNS and WINS Servers.
Arthur Li
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact tngfb@microsoft.com .
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. -
Friday, April 29, 2011 9:53 AMModerator
Can you uninstall RSAT & reinstall it to check if it resolves your issue.
Regards
Awinish Vishwakarma| MY Blog
Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.
-
Friday, April 29, 2011 12:38 PMRSAT was installed before Windows 7 SP1. I believe if errors out if you try to install it after Sp1 unless you use the SP1 RSAT tools. Never tried it though.
-
Friday, April 29, 2011 12:42 PMI tried disabling Windows Firewall and my anti-virus. This did not affect it. Also checked the DNS and WINS settings on my client. The settings come from DHCP and were in fact correct.
-
Monday, May 09, 2011 7:13 AMModerator
Can you please get a netmon trace while reproducing the issue?
Send email to blrforum-at-microsoft-com once done to get the workspace information to upload the trace. Also, mention the IP addresses of client and DC.
Thanks.
Ketan Thakkar | Microsoft Online Community Support -
Monday, May 09, 2011 12:50 PMI just did a Netmon trace and emailed that address. Last week I also uninstalled and reinstalled RSAT as requested above. It made no difference.
-
Thursday, May 12, 2011 10:24 AMCan you let us know the name of the user whose member of tab you tried to access? You could e-mail us the username at the same e-mail address Ketan gave you earlier.
-
Thursday, May 12, 2011 3:58 PM
The interesting part to me is that once I say ok to the error it shows me the groups just fine. I can also then add/remove myself from any groups without error. I don't know why the error is produced, but as far as I can tell it's just an annoyance. If it quickly errored out it would be less annoying, but I get an "hour glass" for a good 18 seconds before it errors out (I just timed it). Then I can accept the error and go about my business. Whatever is causing the error may potentially cause problems with other things, but I don't know what those things would be. That concerns me a little.
-
Thursday, May 12, 2011 4:35 PM
Could you also tell us if you have multiple domains in the forest? Which domain is your Windows 7 machine part of? If you have a single domain in the forest, does your user account whose member of tab gives you the error, member of any trusted domain group\groups?
I also sent you a link to download and run the MPS reports on your Windows 7 machine.
-
Thursday, May 12, 2011 4:52 PMYes there are multiple domains in the forest. My account is in the macpc domain. I am a member of groups in other domains within the forest. I tried viewing another account that is also a member of a group in another domain and that worked just fine.
-
Tuesday, May 17, 2011 10:56 AMModerator
Hi Brian,
Have you run through MPS reports already? I haven't got it yet.
Ketan Thakkar | Microsoft Online Community Support -
Wednesday, May 18, 2011 12:35 PMNo sorry. I've been super busy. I'll try to find time to get it done today.
-
Thursday, May 19, 2011 1:23 PMModerator
Review of the network capture, didn’t find much, see if the problem reproduces on the DC 136.204.33.6, it’s the one were talking to in the network trace.
if it hasn’t been done, uninstall RSAT and install the SP1 version of the tool and test again. The blog notes it has NOT been done.
Latest version of rsat for Windows 7 SP1
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=7d2f6ad7-656b-4313-a005-4e344e43997d&displaylang=enFollow-up questions:
In the Member of TAB do we get any unresolved SIDs after we clear the error? if so where do these sids resolve to.
Dos this occue if we use a different administrator account on the system that rsat is installed on (checking if it’s something in the user profile)
Ketan Thakkar | Microsoft Online Community Support -
Thursday, May 19, 2011 2:09 PMI have already uninstalled RSAT and then installed the SP1 version. It made no difference. I'll see what I can do about testing from that DC. The problem is I don't have access to it as it's not in my domain.
-
Thursday, May 19, 2011 2:24 PM
Actually as I mentioned above, this doesn't happen if I remote desktop to one of my DCs. It only happens from my client using RSAT. I'm wondering if it's really worth it to try getting permission to login locally to a DC that isn't mine. Not sure I want to jump through those hoops unless I feel it's really important. Do you really think I should?
-
Friday, May 27, 2011 9:18 AMModerator
Hi,
Can I get the below data collection?
1. MPS reports from Both DCs across the trust http://www.microsoft.com/downloads/en/details.aspx?FamilyID=cebf3c7c-7ca5-408f-88b7-f9c79b7306c0
2. Is this the same forest ? or External or Forest Trust between forests ?
3. Get PortQuery output http://www.microsoft.com/downloads/en/details.aspx?FamilyID=89811747-C74B-4638-A2D5-AC828BDC6983
4. Get Netmon traces from the failure http://www.microsoft.com/downloads/details.aspx?familyid=983b941d-06cb-4658-b7f6-3088333d062fMake sure AD replication is good in both domains.
Also does this happen when opening Member Of Properties on the DC in the domain ?
Ketan Thakkar | Microsoft Online Community Support -
Tuesday, May 31, 2011 10:27 PM
Again, this does not happen when I'm logged in to a DC...only from my Windows 7 client using RSAT tools. The other domain admin I work with has the exact same problem on his client. I could get you an MPS from my DC, but I don't feel comfortable posting it in these forums. I do not have access to the DC is the other domain as they are not my servers. Everything exists in one forest.
-
Wednesday, June 01, 2011 5:03 PMModeratorCan you send email to blrforum- at microsoft com? I'll send you SFTP workspace info where you can upload the data.
Ketan Thakkar | Microsoft Online Community Support -
Thursday, June 09, 2011 9:46 PM
Can you send email to blrforum- at microsoft com? I'll send you SFTP workspace info where you can upload the data.
Ketan Thakkar | Microsoft Online Community SupportI have the same issue but no matter where I connect from whether on a DC or remote I get that same error.
i can run the dsget user commands -memberof without issue. It comes back with all of my group memberships. no issues.
Just when i run aduc and click on the member of tab.
Any ideas?
Thanks.
Billy Patterson - MCSE + Security -
Monday, June 20, 2011 2:10 AMModerator
Hi,
I would like to confirm what is the current situation? If there is anything that I can do for you, please do not hesitate to let me know, and I will be happy to help.
Arthur Li
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact tngfb@microsoft.com .
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. -
Friday, June 24, 2011 7:04 AMModerator
Hi Brian,
I haven't got any data upload once you got the workspace info.
Ketan Thakkar | Microsoft Online Community Support -
Friday, June 24, 2011 12:35 PMYes I apologize. I've been extremely busy lately and this isn't at the top of my list. I appreciate your willingness to help and will try to get you something soon. Did you still want the data collection to be done on one of my DCs? Again, the problem doesn't happen there so it seems to me like it would make more sense to get data from my Win7 client where the problem happens.
-
Friday, June 24, 2011 1:24 PM
Hi,
Can you check DNS on machine from which you are running dsa.msc ( Active directory Users and computers ) snap-in ? I had faced this issue and correcting DNS on client machine solved the problem. DNS configured on your machine should be able to resolve the domain name that you are trying to manage.
Regards.
-
Monday, June 27, 2011 9:24 AMModerator
Hi Brian,
Its ok for me to leave this thread alone for some time, just ping back on here once you are ready to invest time on this.
Thanks.
Ketan Thakkar | Microsoft Online Community Support -
Saturday, April 14, 2012 9:00 PM
Hi Brian, did you ever get to the bottom of this? I have the same problem, except it happens for 99% of accounts we open the member of tab on. It does not happen when doing it on a DC. We have 2 domains in the forrest, I can only access 1, and there is 1 trusted domain
-
Monday, April 16, 2012 12:37 PMNo...I just don't have time to fix it. I've added it to the long list of things I don't have time to do. I won't be able to address this any time soon.
-
Monday, April 16, 2012 1:02 PM
Ok,can you confirm are you facing issue on Single Win7 PC or all?If not I would recommend to install RSAT on other Win7 PC and check how does it work?
Also ensure the below DNS setting on Client PC.
-->> IP configuration on clients and member servers:
-----------------------------------
1. Each workstation/member server should point to local DNS server as primary DNS and other remote DNS servers as secondary.
2. Do not set public DNS server in TCP/IP setting of client/member server.If multiple NIC are present disable the unrequired NIC.
Best Regards,
Sandesh Dubey.
MCSE|MCSA:Messaging|MCTS|MCITP:Enterprise Adminitrator | My Blog
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
.png)
