Adding Group and User Causes Full Synchronization (108874)


The information in this article applies to:

  • Microsoft Windows NT Server 3.1
  • Microsoft Windows NT Workstation 3.1
  • Microsoft Windows NT Advanced Server 3.1
This article was previously published under Q108874

SYMPTOMS

In some cases, when you create a new Group on a primary domain controller (PDC) then add a new User to the new Group, a full synchronization occurs on an OS/2 backup domain controller (BDC); the entire accounts database is copied from the PDC to the BDC.

CAUSE

During the partial sync, NetLogon on the PDC packs a delta for each of the following events:

  • The membership of the group is changed.
  • A new user is added.
  • The new user is added to the group.
For the first event, the delta contains the membership of the group. However, the newly-added user is a member of the group. When the BDC gets this delta, it doesn't handle it properly because the new user doesn't exist yet on the BDC.

STATUS

This behavior is by design in the LAN Manager NetLogon service.

MORE INFORMATION

Steps to Reproduce Problem

  1. Open User Manager For Domains.
  2. Select a user.
  3. Choose User, and then choose New Global Group.
  4. Add the group. (Note that the user will automatically be added to the group.)
  5. Immediately create a user.
  6. Add this user to the already created new group.
The full sync then occurs to the OS/2 BDC.

If you are using LAN Manager version 2.2b on the BDC, error 3226 ( c9 08-- 2249 ) may appear in the error log:
Error in synchronizing with primary domain controller \\PDC
Modification Type:MajorLast Reviewed:11/20/2003
Keywords:kbenv KB108874
©2003 Microsoft Corporation. All rights reserved.