Does not show groups or users that make up existing groups. Nor does it show any accounts when I try to add users or groups to an existing group. I can create groups but not populate them. This just happened in the last couple of weeks. It started with showing only the SID for each user and group. Any thoughts?

Hello, as it seems that the DCs are not working correct or some other problems exist, please run the support tools in your domain and upload the output: ipconfig /all >c:\ipconfig.txt [from each DC/DNS Server] dcdiag /v /c /d /e /s:dcname >c:\dcdiag.txt repadmin /showrepl dc* /verbose /all /intersite >c:\repl.txt ["dc* is a place holder for the starting name of the DCs if they all begin the same (if more then one DC exists)] dnslint /ad /s "DCipaddress" (http://support.microsoft.com/kb/321045) As the output will become large, DON'T post them into the thread, please use Windows Sky Drive (skydrive.live.com) [with open access!] and add the link from it here. Also the /e in dcdiag scans the complete forest, so better run it on COB.Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Hi Meinolf, I should have mentioned that everything is working properly in AD Users and Computers.

Hi, Please chose another Domain Controller to see does the AD Administrative Center work properly. Best Regards, Yan Li

Hi Yan, Didn't help. However I narrowed down the problem. I can only see/choose from "Built in security principles" and "groups". When I compare with AD users and computers I see all the various users and groups from which to choose from.

Can we isolate if it is just a UI issue or AD Module? Open AD PowerShell and try doing some operation(which is not working in AD Admin center) like this: Get-ADGroup GroupName | Add-AdGroupMember -Members User1 Get-AdGroup Group1 | Get-AdGroupMember <-- does this command display user1? Ketan Thakkar | Microsoft Online Community Support

Hi, thanks for the idea. I tried the commnad line "Get-ADGroup ..." but there is not noun ADGroup. I have get-acl and then next is get-alias

Did you load AD powershell? Do you not have above commands when you run "import-module activedirectory"? Ketan Thakkar | Microsoft Online Community Support

It works. I thought I had run that command a long time ago. I get group memberships. The only problem remaining is that under members for the accounts/groups I add from a trusted domain (one way trust) they always are listed by SIDs and under the same AD DS folder "foriegnSecurityPrinciples" instead of by account or group name. It makes it hard to see which group or account. If I run the get adgroupmember it gives me the name. Thanks

Hi, What you are complaining about is absolutely the case in current version. "Readable name" is not populated for foreign security principals and thats an issue in AD Admin center. I have already invovled relevant groups and I'll get back if I have any update from them. As of now, it shows readable names only at one place in that console, if you double click (general) > select 'general' tab Thanks Ketan Thakkar | Microsoft Online Community Support