Indows 2008 R2/after SPS2007---2013, it is found that the domain group in the original domain can not be added

Based on the analysis of the previous network package, we found the WTC-Beijing-It group in ad, but we did not find any records that were successfully searched in SharePoint logs.

 

-Searchresultentry: Cn = WTC-Beijing-it, ou = groups, ou = Beijing, ou = WTC user, ou = westrac China, Dc = westrac, Dc = com, Dc = Cn

+ Objectname: Cn = WTC-Beijing-it, ou = groups, ou = Beijing, ou = WTC user, ou = westrac China, Dc = westrac, Dc = com, Dc = Cn

-Attributes: 9 Partial attributes

+ Sequenceheader:

+ Partialattribute: objectclass = (top) (Group)

+ Partialattribute: Cn = (WTC-Beijing-it)

+ Partialattribute: distinguishedname = (CN = WTC-Beijing-it, ou = groups, ou = Beijing, ou = WTC user, ou = westrac China, Dc = westrac, Dc = com, dc = cn)

+ Partialattribute: displayname = (WTC-Beijing-it)

+ Partialattribute: proxyaddresses = (SMTP: [email protected]) (MS: westracequ/westrac/wtcbeijin9) (ccmail: WTC-Beijing-it at old) (notes: [email protected] exchange) (SMTP: [email protected]) (x400: c = US; A =; P = westrac equipmen; O = West

+ Partialattribute: objectsid = ()

+ Partialattribute: samaccountname = (WTC-Beijing-it)

+ Partialattribute: grouptype = (-2147483640)

+ Partialattribute: Mail = ([Email protected])

-Ldapmessage: search result done, Message ID: 355

+ Parserheader:

+ Messageid: 355

+ Operationheader: search result done, 5 (0x5)

+ Searchresultdone: Status: Success, matcheddn: NULL, errormessage: NULL

+ Controls:

 

Perform the following steps:

 

1. Run the following command on the Sharepoint Server:

The webappurl is the URL of the Web application, which can be obtained from the "manage applications" page in the management center.

 

CD "c: \ Program Files \ common files \ microsoft shared \ Web Server Extensions \ 15 \ bin"

Stsadm.exe-O getproperty-PN extends icker-searchadforests-URL http: // webappurl

Record command output results

Stsadm-O setproperty-URL http: // webappurl-PN encrypted icker-searchadforests-PV "Domain: westrac.com.cn; domain: westrac.com"

Execute stsadm.exe-O getproperty-PN restart icker-searchadforests-URL http: // webappurl

Confirm that the output vaule is domain: westrac.com.cn; domain: westrac.com

Iisreset restart IIS

Verify whether the problem persists.

 

2. Because no detailed SharePoint logs and network packages are captured at the same time, if the problem persists after step 1, follow the previous steps to capture it again.

3. Execute getsid.exe in the attachment <DC01/dc02 are two DC Server names respectively>

Execute getsid.exe \ DC01 "WTC-Beijing-it" \ dc02 "WTC-Beijing-it" in the iisapplication pool by question site"

Result.

Example: