The GPR Security Report shows user accounts listed multiple times. (NETIQKB48235)

fact
NetIQ Group Policy Administrator 4.6

fact
NetIQ Group Policy Administrator 5.0

symptom
The GPR Security Report shows user accounts listed multiple times.

symptom
GPR Security Reports display incorrect data.

cause

The GPR Security Report shows user accounts listed multiple times because of the way the XSL file that creates the report treats permissions.

The XSL file uses logic that pulls common rights shared by a single account to the highest common level, causing duplication of user accounts in reports.   For example, consider the following scenario:

Domain1 has the following categories:

• Domain1\Category1
• Domain1\Category2

User1 has the following roles:

• Role1 (with permission1, permission2, and permission3) on Category1
• Role2 (with permission3 and permission4)

Based on the above scenario, the XSL logic might combine the report data to say the following:

• User1 has permission3 at Domain1
• User1 has Role1 on Category1
• User1 has Role2 on Category2

fix

NetIQ Technical Support opened a Fix Request with Development to resolve this issue in a future version of Group Policy Administrator.

Formerly known as NETIQKB48235