After upgrading an existing 2003 Installation to 2003 with SP3, some users and / or users in groups may be unable to start or view processes.

Once the 2003 environment has been updated to 2003 with SP3, some users may be unable to start and or view processes. The new version of 2003 includes an optimization for Microsoft Active Directory integration when resolving groups. The loss of rights to start and view processes will only occur if the "Group Name" and the "Group Name (pre-Windows 2000)" in Microsoft Active Directory are not the same.

To correct this, first check that the two names are not the same. If they are not the same then the Service Manager is used to restore to the users that have lost their permissions their appropriate access rights to start and view processes.

The image below illustrates the difference between the two names.


When the group was created, Microsoft Active Directory populates the "Group name (pre-Windows 2000)" field with the same name from the Group Name field. Once the Group Name was entered, the Administrator is able to edit the "Group name (pre-Windows 2000)" field without affecting the "Group name" value.


Shown in the image below, the Group Name (pre-Windows 2000) has been edited


Adding Permissions

To re allocate the permissions to the group all that is required is to open 2003 Service Manager, identify the group using the "Group name (pre-Windows 2000)" and then provide the group with the appropriate permissions.

To accomplish this, do the following from the machine where the 2003 Service Manager is installed:

  • Click on "Start > All Programs > 2003 > Service Manager"
  • Select a Server e.g. "My Server > Groups"
  • Right click on "Groups" and select "Find Groups"
  • Search for groups using e.g. "My" as a search mask. Notice that the group appears in 2003 Service Manager using the pre-Windows 2000 group name
Note: Since Service Manager associates the permissions with the pre-Windows 2000 group name, this is the name that will appear when searching for groups.
  • Click "Ok" to add the group
  • Select the group e.g. "My Group"
  • Right click on the group and allocate the permissions to the appropriate processes
  • When complete, click "Ok" and close the 2003 Service Manager