Limitations; Moving User Objects Across Containers; Primary Group Appears Twice In The Memberof Properties Page; Adding Newly Created Users To A Group Gives Error Message - Novell OPEN ENTERPRISE SERVER 2.0 SP2 - DOMAIN SERVICE FOR WINDOWS Manual

Users created in the domain are automatically provisioned for DSfW. Additional information you
specify for the user, such as telephone numbers and e-mail addresses, can also be viewed and
modified in iManager. However, attributes that are specific to Active Directory cannot be managed
in iManager.

12.3 Limitations

Section 12.3.1, "Moving User Objects Across Containers," on page 140
Section 12.3.2, "Primary Group Appears Twice in the memberOf Properties Page," on
page 140
Section 12.3.3, "Adding Newly Created Users to a Group gives Error Message," on page 140
Section 12.3.4, "Dynamic Groups Is Not Supported in DSfW," on page 140
Section 12.3.5, "Security Filter Not Working in Win7," on page 140

12.3.1 Moving User Objects Across Containers

When you move objects across containers through MMC, even though the move operation is
successful, you might get an error message saying that Windows cannot move that object because
there is no such object on the server. You can use MMC to connect to the domain controller that
holds the master replica and retry the operation.
12.3.2 Primary Group Appears Twice in the memberOf
Properties Page
DSfW explicitly adds users to the primary group. This causes MMC to display the group twice in
the memberOf property page.
12.3.3 Adding Newly Created Users to a Group gives Error
Message
You cannot add users by using MMC to Domain Local, Global and Universal Groups who do not
have the Last Name property. Though an error message is displayed, the users are added to the
groups. The error message can be avoided if the user is created with the Last Name property.

12.3.4 Dynamic Groups Is Not Supported in DSfW

DSfW server does not support Dynamic Groups. However if applications are connected to plain
eDirectory servers, dynamic groups will function as expected.

12.3.5 Security Filter Not Working in Win7

To add users or groups to GPO is not supported in Windows 7. However the administrator can add
the users and groups to the GPO using Windows XP or Windows Vista.
140 OES 2 SP2: Domain Services for Windows Administration Guide