Adding Group and User Causes Full Synchronization
Article ID: 108874
Article Last Modified on 11/1/2006
APPLIES TO
- Microsoft Windows NT Advanced Server 3.1
- Microsoft Windows NT Workstation 3.1
- Microsoft Windows NT Advanced Server 3.1
This article was previously published under Q108874
SYMPTOMS
In some cases, when you create a new Group on a primary domain controller
(PDC) then add a new User to the new Group, a full synchronization occurs
on an OS/2 backup domain controller (BDC); the entire accounts database is
copied from the PDC to the BDC.
CAUSE
During the partial sync, NetLogon on the PDC packs a delta for each of the
following events:
- The membership of the group is changed.
- A new user is added.
- The new user is added to the group.
For the first event, the delta contains the membership of the group.
However, the newly-added user is a member of the group. When the BDC gets
this delta, it doesn't handle it properly because the new user doesn't
exist yet on the BDC.
STATUS
This behavior is by design in the LAN Manager NetLogon service.
Additional query words: prodnt
Keywords: kbenv KB108874