Err Msg: This Operation is Not Allowed in this Special Group

MORE INFORMATION

When you delete a global group, Windows NT Advanced Server first removes all of its members; if one of its members is a Services for Macintosh user and has that group assigned as his Primary Group, the Windows NT Advanced Server fails to remove the group and generates the above error message (ID 2234). (The same thing happens if, when doing group maintenance, an attempt is made to remove that Macintosh user).

To successfully delete the group, modify all Services for Macintosh users that are members of that group, and have it as their Primary Group, so they have a different Primary Group.

For each Service for Macintosh user, do the following:

1. From the User Manager for Domains, double-click the desired user.
2. Select Groups.
3. Choose a global group (different than the one you want to delete), and then choose Set.
4. Choose OK.
5. Choose OK or Close.

Even though this operation is time-consuming, using a Primary Group is recommended because of the lack of flexibility in the Macintosh permission scheme.

For more information on how to set Primary Groups for Services for Macintosh users and what the permission scheme is, see the chapter titled "How Services for Macintosh Works" in the Windows NT Advanced Server "Services for Macintosh" guide.