Adding CIFS group member fails if it has a different security identifier
Applies to
- ONTAP 9
- CIFS
Issue
- Adding a user to a local CIFS group fails with an error that the an Active Directory object is is present in the local configuration databases with a different security identifier.
::> vserver cifs users-and-groups local-group add-members -group-name GROUP -member-names DOM\user
Error: command failed: The Active Directory object "DOM\user" is present in the local configuration databases with a different security identifier. Before retrying this command, if the object has been renamed in Active Directory, run the
"vserver cifs users-and-groups update-names" command under advanced privilege. If the object was deleted, reset any privileges associated with it and remove the object from all local groups.
- Powershell example:
Add-NcCifsLocalGroupMember : The Active Directory object "DOM\user" is present in the local configuration databases with a different security identifier.