Adding Group and User Causes Full Synchronization

 Last reviewed: May 13, 1997
Article ID: Q108874
The information in this article applies to:
  • Microsoft Windows NT operating system version 3.1
  • Microsoft Windows NT Advanced Server version 3.1

SYMPTOMS

In some cases, when you create a new Group on a primary domain controller (PDC) then add a new User to the new Group, a full synchronization occurs on an OS/2 backup domain controller (BDC); the entire accounts database is copied from the PDC to the BDC.

CAUSE

During the partial sync, NetLogon on the PDC packs a delta for each of the following events:

  • The membership of the group is changed.
  • A new user is added.
  • The new user is added to the group.

For the first event, the delta contains the membership of the group. However, the newly-added user is a member of the group. When the BDC gets this delta, it doesn't handle it properly because the new user doesn't exist yet on the BDC.

STATUS

This behavior is by design in the LAN Manager NetLogon service.

MORE INFORMATION

Steps to Reproduce Problem

  1. Open User Manager For Domains.

  2. Select a user.

  3. Choose User, and then choose New Global Group.

  4. Add the group. (Note that the user will automatically be added to the group.)

  5. Immediately create a user.

  6. Add this user to the already created new group.

The full sync then occurs to the OS/2 BDC.

If you are using LAN Manager version 2.2b on the BDC, error 3226 ( c9 08-- 2249 ) may appear in the error log: 

   Error in synchronizing with primary domain controller \\PDC

Additional query words: prodnt
Keywords : kbenv ntconfig
Version : 3.1
Platform : WINDOWS

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.

Last reviewed: May 13, 1997
© 1998 Microsoft Corporation. All rights reserved. Terms of Use.