|Issue:||AD User profiles work but AD Group profiles do not|
|Product:||Pearl Echo 9 and Later|
|Applies to:||All Builds|
Background:The Pearl Echo Server software is Active Directory (AD) aware and locates available Users and their Groups from your AD server(s). On Windows Servers, the default AD permissions allow network resources to read AD object attributes. Microsoft Small Business Server does not assign the same default Active Directory LDAP read permissions as Windows 2000, 2003, etc. If the Pearl Echo Server software is installed on a domain computer other than the SBS Server, it may not have permission to read AD Object attributes and therefore may not be able to associate users with their AD Groups.
Assign permissions to allow the Pearl Echo Server computer to read Active Directory group members. To change AD permissions, in Active Directory Users and Computers, right-click on the root of the tree for the domain, select All Tasks > Delegate Control…