GPA does not recognize trusted sibling domains in the same Active Directory forest. (NETIQKB53185)

  • 7753185
  • 02-Feb-2007
  • 25-Apr-2008

Resolution

fact
NetIQ Group Policy Administrator 5.0

symptom
GPA does not recognize trusted sibling domains in the same Active Directory forest.

symptom
GPA does not recognize transitive trusts between child domains under a single parent domain.

symptom
If you move a master Group Policy Object (GPO) to a different category in the GP Repository, the GPO does not retain the master GPO setting.

symptom
If you drag and drop a GPO from one category to another in the GP Repository, the GPO does not retain the master GPO setting.

symptom
When creating a new GPO from an existing GP Repository GPO using the copy and paste feature, GPA does not copy the entries on the Delegation tab and on the Links tab from the existing GPO to the new GPO.

symptom
When you try to view the properties of a new GPO by clicking on the GPR Security tab, GPA closes.

fix

NetIQ Group Policy Administrator version 5.0 Hotfix 53185

Hotfix 53185 addresses the following issues:

  • If you add a new child domain to the GP Repository from a different forest than the forest where you installed the GPA Console, GPA does not recognize the forest-level trust for the new child domain. For more information, see NETIQKB53745'GPA does not recognize trusted sibling domains in the same Active Directory forest.'
  • When you copy and paste a new GPO from a GPO in the GP Repository, GPA does not copy the entries on the Delegation tab or the Links tab from the existing GPO to the new GPO. If you click the GPR Security tab of the new GPO, the GPA console closes. For more information, see NETIQKB52580 'When creating a new Group Policy Object (GPO) from an existing GP Repository GPO using the copy and paste feature, GPA does not copy the entries on the Delegation tab and on the Links tab from the existing GPO to the new GPO.'
  • If you move a master GPO to a different category in the GP Repository, the GPO does not retain the master GPO setting. For more information, see NETIQKB53220 'If you move a master Group Policy Object (GPO) to a different category in the GP Repository, the GPO does not retain the master GPO setting.'

Hotfix 53185 ensures GPA:

  • Recognizes forest-level trusts for child domains when adding a new child domain to the GP Repository.
  • Copies and pastes the entries on the Delegation tab and the Links tab from GPOs in the GP Repository to newly copied GPOs.
  • Displays group and user names on the GPR Security tab of newly copied GPOs.
  • Retains master GPO settings when you move a GPO to a different category.

To install this hotfix, perform the following steps:

  1. Download Hotfix 53185. To download this hotfix, go to support.netiq.com/gpa, and then click Hotfixes.
  2. Close all GPA user interfaces.
  3. Run the GPA50000_Hotfix53185.exe file on each computer where you installed a GPA Console.

This hotfix modifies the following files:

  • faDBContainerInterface.dll
  • faGPR.dll

By default, GPA installs these files in the Program Files\NetIQ\Group Policy Administrator\Bin folder.



Additional Information

Formerly known as NETIQKB53185