A large number of GUID containers display when browser OU's with a Windows 2003 Domain Controller. (NETIQKB28615)

  • 7728615
  • 02-Feb-2007
  • 19-Jun-2007

Resolution

fact
Directory and Resource Administrator 6.60

fact
Directory and Resource Administrator 7.x

symptom
A large number of GUID containers display when browser OU's with a Windows 2003 Domain Controller.

cause
This is due to a new container created when you have a Windows 2003 DC.  If you have a Windows 2003 DC, there is a new container under the system container called  domainupdates.  The full path to the container is:
 
..\system\domainupdates\Operations

Under the operations container is a large number of Active Directory objects that are designated as container objects. 


fix

This is the correct behavior.  In Directory and Resource Administrator (DRA) 6.6,  the containers will only show up for Assistant Admins who have the power to view the containers.  In other words, only Domain Admins, Built-in Admins or Assistant Admins that have been delegated to an ActiveView with a rule like 'include OU with name matching *', will see the extra GUID containers. 

In Directory and Resource Administrator version 7.0 and later the following steps can be performed in order to hide these objects from being displayed in the DRA GUI.

To modify the Show advanced Active Directory objects setting, perform the following logged in as an Assistant Admin with the DRA Administration Role. 

  1. Launch the Delegation and Configuration Console.
  2. Select the Configuration Management node.
  3. Select Update Adminstration Server Options... from the Tasks menu.
  4. Select the Client Options tab.
  5. Make sure Show advanced Active Directory objects is unchecked and click OK


Additional Information

Formerly known as NETIQKB28615