AD Group Members Disappear

Why would most of the domain members disappear from thier assigned Security
and Distribution Groups? This has happened twice to our server. Once
during a swing migration about a month ago and then again more recently.
The only change I recall doing yesterday was editing the Standard User role
and unchecking the Enforce the shared folder quota box. The first time this
happened I blamed it on a fluke with the swing migration and possibly a bad
replication or something. To fix it, I reassigned members to thier groups
manually. Any thoughts on doing this again to get people working until I
find a resolution?

I restored to a lab server from a backup prior to any changes made in the
SBS Console. I made a change to the Standard User role in the SBS Console
and immediately the group members were removed. Ah ha! I created a new
group, via the SBS Console, added members, via the SBS Console, made a
change to the Standard User role and again the members were removed from the
new group. Why would making a change to the Standard User role in the SBS
Console remove members from their groups!?


"CourtK" <> wrote in message
news428323E-AF8F-4804-AE5F-...
> Why would most of the domain members disappear from thier assigned
> Security and Distribution Groups? This has happened twice to our server.
> Once during a swing migration about a month ago and then again more
> recently. The only change I recall doing yesterday was editing the
> Standard User role and unchecking the Enforce the shared folder quota box.
> The first time this happened I blamed it on a fluke with the swing
> migration and possibly a bad replication or something. To fix it, I
> reassigned members to thier groups manually. Any thoughts on doing this
> again to get people working until I find a resolution?

Hello Court,

Thanks for your post.

Generally, User roles are template user accounts that allow the administrator to quickly create users based on certain common criteria. Access to resources in Windows
SBS 2008 is granted by using group memberships. Each of the user roles in Windows SBS 2008 grants different levels of resource access, making it easy to create multiple
user accounts quickly.

Regarding this issue, as I understand from your description, you first use Standard User role and created a new user A via the SBS console, then modify the Standard User
role settings, e.g. unchecked the "Enforce the shared folder quota" box and applied, then all of sudden, the previously created Standard user A disappeared. Is that correct?

If so, it is indeed an odd behavior. Does it only occurs to the "Standard User role"? Have you tried created a new User role , then check if making change to the new User
role would remove previously created members. If the issue only occurs to the "Standard User role", please use ADUC instead of SBS Console to check and compare the
"Standard User" account properties/security permission with other good account like "Network Administrator" under SBSUsers OU.

Meanwhile, please run SBS 2008 BPA to check if there is any related issue detected.

Introducing the Windows Small Business Server 2008 Best Practices Analyzer
<http://technet.microsoft.com/en-us/library/dd145275.aspx>

Windows Small Business Server 2008 Best Practices Analyzer
<http://www.microsoft.com/downloads/details.aspx?FamilyId=86A1AA32-9814-484E-BD43-3E42AEC7F731&displaylang=en>

Hope it helps.



Best regards,
Robbin Meng(MSFT)
Microsoft Online Newsgroup Support

================================================== ================
Please post your SBS 2008 related questions to the SBS newsgroup on Connect website:
https://connect.microsoft.com/sbs08/...i/default.aspx

Please post your EBS related questions to the EBS newsgroup on Connect website:
https://connect.microsoft.com/ebs08/...i/default.aspx

If you want to use a newsreader other than a web forum to access these newsgroups,
please refer to the following blog to apply NNTP password and configure a newsreader:
http://msmvps.com/blogs/bradley/arch...ewsgroups.aspx
================================================== ================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ================
This posting is provided "AS IS" with no warranties, and confers no rights.
================================================== ================