DMA Removes Source Domain ACEs From Some Files ACLs During A Security Translation Performed In 'Add' (NETIQKB1817)

  • 7701817
  • 02-Feb-2007
  • 14-Sep-2007


If User Profiles are selected in the Security Translation options, then the recycle bin is also translated. By design, DMA translates security on recycle bins in 'Replace' mode. If security translation is being run in 'Add' mode, then DMA must switch this process for the translation of the recycle bin. NetIQ Development has determined that there is an issue in DMA which switches all translation modes to 'Replace' rather than just the thread that is translating the recycle bin. Once the recycle bin is translated (typically a few seconds, depending on the size of the recycle bin) the translation mode is set back to 'Add'. However, during this time any files that were translated for resources outside of the recycle bin are also transalted in 'Replace' mode.

Hotfix Q12387 should be applied after all other Hotfixes for DMA 7.0.  If the fix is properly applied, the McsDctWorkerObject.dll will have a date/time stamp of 1/24/2002.

This article contains all known information about this issue and the Hotfixes and workarounds are availble to resolve it.

Please contact Technical Support to create a 'Support Request' for any issues you encounter that are not addressed by the User Guide, any Knowledge Base articles found on the website, or current Hotfixes available for download.

Additional Information

Formerly known as NETIQKB1817