Unable to set site permissions for AD group

Hello,

I have upgraded TFS from 2012 to 2013 Update 2 and using SharePoint SP1.

The TFS server is installed in Domain A which has Trust to Domain B (domain B doesnt have trust to domain A). User account that the TFS runs under is from Domain B, also application pool in IIS runs under account from Domain B.

Problem is that i cannot add domain groups from Domain A to the site permissions, i can add users but not the groups.

The error i get when adding domain group from Domain A: "The user does not exist or is not unique"

Does anybody have that or had this kind of problem?


  • Edited by Peta Karas 19 hours 47 minutes ago adding error message
July 9th, 2014 11:24am

It is the Application Pool account making the query to retrieve the groups, so you would need to establish a trust from Domain B -> A.
Free Windows Admin Tool Kit Click here and download it now
July 9th, 2014 12:50pm

I managed to make it to work using:

stsadm -o setproperty -url http://<TfsServerName>/sites/<CollectionName> -pn peoplepicker-searchadforests -pv "<domainName>,<DomainUser>,<PassWord>" 

This command will set specified user to search the domain, it than will find the group.

  • Marked as answer by Peta Karas 2 hours 50 minutes ago
July 10th, 2014 4:22am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics