ADSI adding a group to a group

[Russ Ferrill]

I have a C# application in which I need to add one Active Directory group as
a member of another group. I have tried using the same steps that work for
adding a user to a group, but that isn't working. I'm just adding the
distinguished name of one group to the member property of another. Either
I'm missing something or there must be a better way. All suggestions
welcome.

Thanks!

Russ

[Joe Kaplan \(MVP - ADSI\)]

What's not working? Are you getting a "constraint violation" or "unwilling
to perform" error, or is something else wrong?

There are specific rules about what types of groups can be nested in other
groups. Additionally, you'll want to ensure that your AD domain is at least
in 2000 native mode (not mixed mode).

Joe K.

"Russ Ferrill" <rf******@paracominc.com> wrote in message
news:Oc****************@newssvr25.news.prodigy.net ...

I have a C# application in which I need to add one Active Directory group
as a member of another group. I have tried using the same steps that work
for adding a user to a group, but that isn't working. I'm just adding the
distinguished name of one group to the member property of another. Either
I'm missing something or there must be a better way. All suggestions
welcome.

Thanks!

Russ

[Joe Kaplan \(MVP - ADSI\)]

What's not working? Are you getting a "constraint violation" or "unwilling
to perform" error, or is something else wrong?

There are specific rules about what types of groups can be nested in other
groups. Additionally, you'll want to ensure that your AD domain is at least
in 2000 native mode (not mixed mode).

Joe K.

"Russ Ferrill" <rf******@paracominc.com> wrote in message
news:Oc****************@newssvr25.news.prodigy.net ...

I have a C# application in which I need to add one Active Directory group
as a member of another group. I have tried using the same steps that work
for adding a user to a group, but that isn't working. I'm just adding the
distinguished name of one group to the member property of another. Either
I'm missing something or there must be a better way. All suggestions
welcome.

Thanks!

Russ

[Marc Scheuner [MVP ADSI]]

>I have a C# application in which I need to add one Active Directory group as

a member of another group. I have tried using the same steps that work for
adding a user to a group, but that isn't working. I'm just adding the
distinguished name of one group to the member property of another. Either
I'm missing something or there must be a better way. All suggestions
welcome.

SHOW US THE CODE !!

There are a number of things that commonly cause this to fail:

* your servers are not in native mode, e.g. you still have a mixed NT4
/ Win2K / Win2003 environment. Here, nesting groups will not work

* you are trying to nest groups which cannot be nested

* you misspelled the DN's of the groups

* you are using WinNT provider instead of LDAP

If none of those apply, we would definitely need to see your code (and
please give us all the variable VALUES, too!) in order to be able to
help

Marc

[Russ Ferrill]

Thanks Joe and Marc!

The problem was the AD domain mode.
Thanks again!