AD Group Integration Problems

This is more of a PSA than anything - I ran into a problem with AD groups in solarwinds. We've had an "operations" group that's been configured in solarwinds for quite some time but we only recently populated the group with domain users. We then told the users they could login only when they tried every single person was getting access denied. We left this overnight to avoid AD replication issues but the results were the same next day. I went through every permission on the group in solarwinds and couldn't find anything that would prevent them from logging in. So I blew the group away, re-added, reset solarwinds permissions a voila it worked.

Has anyone else had this problem before? Is there a way to tell solarwinds to refresh its connection to AD?

Find more posts tagged with

11.5

Accepted answers

All comments

AHooks

I've just come across the exact same issue. AD group was created then added to Solarwinds prior to populating it with users. After adding users non of them were able to log in. I searched Thwack and found this post and did the same as you Ryan. Recreated the AD group in Solarwinds and all then worked as normal. This does lead me to think, what if we now want to add new users to the AD group. Will Solarwinds not pick them up? I'll do some testing to confirm and update this reply accordingly.

***UPDATE***

Removing a user from one AD group and adding to another AD group seems to update their Solarwinds permissions correctly. So it only seems that Solarwinds doesn't like it when you create an empty AD group, add the group in Solarwinds, then add users to the AD group.

ryan.davis26

Hello @AHooks,

FINALLY; I was beginning to think I was the only one! Yes you're right, adding USERS does seem to behave as expected, it's only when the AD group is initially empty as you said that it throws Orion for a loop, very strange indeed!

mshaw1

I've had that issue when there were defunct account limitations applied to the group. As in, groups of groups limitation had a reference to an old/deleted group. When you delete a group it doesn't clean up after itself with regards to view limitations.