| Event Information | "According to Microsoft:
CAUSE :
This issue may occur if authenticated users do not have read access in the Domain container or in the Configuration container in Active Directory.
RESOLUTION :
To resolve this issue, use ADSI Edit to grant authenticated users read access in the Domain container and in the Configuration container in Active Directory.
ADSI Edit is located in the Microsoft Windows 2000 Support Tools. To install the Windows 2000 Support Tools, run Setup in the Support\Tools folder on the Windows 2000 Server CD-ROM. For additional information about the Windows 2000 Support Tools, see the Sreadme.doc file in the Support\Tools folder on the Windows 2000 Server CD-ROM.
WARNING: If you use the ADSI Edit snap-in, the LDP utility, or any other LDAP version 3 client, and you incorrectly modify the attributes of Active Directory objects, you can cause serious problems. These problems may require you to reinstall Microsoft Windows 2000 Server, Microsoft Exchange 2000 Server, or both. Microsoft cannot guarantee that problems that occur if you incorrectly modify Active Directory object attributes can be solved. Modify these attributes at your own risk.
To resolve this issue:
1. Start ADSI Edit:
a. Click Start, point to Programs, and then click Windows 2000 Support Tools.
b. Click Tools, and then click ADSI Edit.
2. Expand the Domain NC container, right-click the folder for the domain (DC=domain,DC=com), and then click Properties to open the folder properties.
3. Click the Security tab, and then make sure that the Authenticated Users group has Read access selected in the Allow column. If Read is not selected, click to select Read, and then click OK.
4. Expand the Configuration Container, right-click the folder for configuration (CN=Configuration,DC=domain,DC=com), and then click Properties to open the folder properties.
5. Click the Security tab, and then make sure that the Authenticated Users grou |
