Changes made to group scopes are not updated on the global catalog server. (NETIQKB51060)

fact
Directory and Resource Administrator 7.5

symptom
Changes made to group scopes are not updated on the global catalog server.

symptom
Error:  'Error changing the property 'groupType.' The server is unwilling to process the request.'

symptom
DRA attempts to make group scope updates on servers that are not global catalog servers.

cause
Changes to group scope must take place on a global catalog server. However, DRA does not automatically connect to a global catalog server when processing group scope changes. As a result, DRA may incorrectly attempt to make updates to group scope on a server that is not a global catalog server.

fix

This issue is addressed in NetIQ Directory and Resource Administrator and Exchange Administrator version 7.5 Hotfix 51060. 

Hotfix 51060 addresses an issue with how Directory and Resource Administrator (DRA) handles modifications to the group scope in the Delegation and Configuration console or the Account and Resource Management console. This issue occurs when you modify the group scope and DRA tries to perform this update on a server that is not a global catalog server. 

To correct this issue, you need to ensure that there is at least one global catalog server in your domain. This hotfix addresses this issue by ensuring that DRA only performs the group scope updates on the global catalog server.

Note: This hotfix requires DRA version 7.5.

To download and install this hotfix, perform the following steps on each Administration server computer:

1. Close all DRA user interfaces.
2. Run the DRA75000_Hotfix51060.msi file on each Administration server computer. 

Hotfix 51060 modifies the Accounts.dll file on the Administration server computer. This file is located in the Program Files\NetIQ\DRA folder.

For more information, please contact NetIQ Technical Support at www.netiq.com/support .

Formerly known as NETIQKB51060