Cannot browse AD groups 1

[windowsfan]

I am trying to configure security on file server but cannot see my groups from AD ( I was able to see them before but now I cannot). I can only see built in groups. For some reason there is some communication problem betwee DC and File server.
I ran nltest to reset secure channel.

what else can I do to fix the issue?

what If I re-join server to domain, will I loose my security settings?

 

[sutors]

If you are talking about NTFS permissions, then no, you will not lose them as they're stored as SIDs.

As soon as you disjoin your file server from domain, you will notice unknown SIDs when you look at folder/file permissions. Just make sure you don't change any permissions while the machine is disjoined.

After you join it back to domain, the SIDs will resolve back to correct names.

Lukasz

 

[windowsfan]

why am I not able to enumerate security acl for users/groups from the file server?

 

[sutors]

There could be 100s of reazons, possibly broken secure channel, or something corrupted on the file server.
Did you already rejoin it to the domain?

 

[windowsfan]

I will rejoin and let you know the result.

Thanks for your help.