When attempting to view a specific group's members within Active Directory Users and Computers, the operation fails with the error:
Windows cannot edit the permissions on 'NameOfGroup' because they have been written in a nonstandard format by another application. To enable editing, you must use the application to restore the permissions to a standard format.
In the Active Roles Console, choose All Tasks | Edit Native Security and click on the Advanced button.
Sort by the Type and check for any Deny permissions. Specifically, there may be a Deny against the ability to View or List Members
Remove these permissions to restore expected functionality in Active Directory Users and Computers.
© ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center