| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Cannot find "Read Group Membership" when config MQ |
« View previous topic :: View next topic » |
| Author |
Message
|
| calvinykw |
 Posted: Thu Jul 29, 2004 8:36 pm Post subject: Cannot find "Read Group Membership" when config MQ |
 |
|
Novice
Joined: 29 Jul 2004
Posts: 12
Location: HK
|
Hello! I'm a beginner of MQ and this is my first post. I've a problem during MQ5.3 installation. Anyone could give me a hand on this issue?
I need to install MQ5.3 on Windows 2003 with domain controller environment. As I know, i need to follow quick beginning guide chapter 11 to create a special MQ groups and accounts before installation. Below is the abstract:
...
Give members of this group the authority to query the group membership of
any account:
a. from the Start menu, open Active Directory Users and Computers
b. Find your domain name in the navigation pane on the left (typically
something like mqdev.server.company.com ), right-click it, select Delegate
Control..., then click Next.
......
c. At Selected Groups and Users, click Add, click domain mqm and click Add,
then click OK.
d. Click "domain mqm" and click Next.
e. Click Create a custom task to delegate and click Next.
f. Click Only the following objects in the folder, check User Objects in the
alphabetical list, then click Next.
g. Check Property-specific, then search down the list (it is in alphabetical
order on the second word) to find:
1) Read Group Membership
2) Read groupMembershipSAM
h. Check both of these options, then click Next.
i. Click Finish.
....
However, in step g, I could only find the option "Read groupMembershipSAM" to check, the option "Read Group Membership" is unavailable. What is the problem comes from?
Regards,
Calvin |
|
| Back to top |
|
 |
| JasonE |
| Posted: Fri Jul 30, 2004 3:30 am Post subject: |
|
|
Grand Master
Joined: 03 Nov 2003
Posts: 1220
Location: Hursley
|
If you wish to grant the group
"domain mqm" the 2 rights mentioned in the article then you will have to
do the following:
.
* Open AD Users & Computers
* Put AD Users & Computers in Advanced Features mode
* Find the domain name in the left panel, right click it and
select Properties, then select the Security Tab.
* Select Advanced then click Add, type in "domain mqm" and click
OK.
* A new screen will pop up. Select the Properties Tab. In the
"Apply onto" box change the view to "User objects"
* Select the Allow check box for "Read Group Membership" and "Read
groupMembershipSAM". (They are not together in the list)
* Click OK to close all windows (Should be 3 times)
.
You have now given the group the rights to enumerate the group
membership for all users in that domain. |
|
| Back to top |
|
|
| calvinykw |
| Posted: Sat Jul 31, 2004 6:09 am Post subject: |
|
|
Novice
Joined: 29 Jul 2004
Posts: 12
Location: HK
|
Thanks for your comment first.
Actually, I could complete all the steps from a to g, however, I can just find the option
"Read groupMembershipSAM"
The option "Read Group Membership" is not available
After further searching, I could only find a option "Read and write Group Membership" instead of read only. Is it the difference between windows 2000 and windows 2003?
Should I choose it in windows 2003 for MQ installation? |
|
| Back to top |
|
|
| calvinykw |
| Posted: Sat Jul 31, 2004 6:31 am Post subject: |
|
|
Novice
Joined: 29 Jul 2004
Posts: 12
Location: HK
|
Oh... JasonE, your way is work. Thank you.
I've followed the way in installation guide to find the option and it's not work for 2003. |
|
| Back to top |
|
|
| JasonE |
| Posted: Sat Jul 31, 2004 8:33 am Post subject: |
|
|
Grand Master
Joined: 03 Nov 2003
Posts: 1220
Location: Hursley
|
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
