Join or sign in Register for your free TechRepublic membership or if you are already a member, sign in using your preferred method below. Use Your Email Use FacebookUse Linkedin

scripting dsadd

Locked

We have a batch file that creates 3 groups using dsadd, creates a lot of folders, then makes 16 folder permission assignments. (Not my idea, talk to QA.) The batch file works – mostly. Groups are created. Folders are created. The first time you run the file, for permissions, you get ERROR: No mapping between account names and security IDs was done. And it really hasn’t done any permissions changes.

Wait 2-15 minutes, run again, get lots of errors about groups and folders already existing, and all permissions are correctly assigned to the correct folders.

Okay, so it is a timing issue. Waiting for 10 minutes in the middle of a batch file seems rather pointless. We don’t want to split folder creation and permissions assignment – too easy to forget step 2. How can I force AD to update all DCs with the new security groups created by dsadd command?

Topic

Reply To: scripting dsadd

In reply to scripting dsadd

Try including the repadmin /syncall to you script.

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnw2kmag01/html/ForcingADReplication.asp

[Author]

Replies