Users Domain level Read access problem

we experiencing issue domain user appears not have authority read @ domain level though in "domain users" group.  issue started off sql server issue local users run jobs.  after doing research on forums , own testing we've discovered domain users, depending on application, cannot domain lookup.  example, same id i, same server can use "active directory users , computers" traverse through domain structure , see permissions, not change them read them; when use other commands "net user username /domain" on other user, other userid issuing, "system error 5 has occurred.  access denied." 

all i've been able find on web generic advice making sure users trying issue such commands have read access @ domain level.  i'm thinking "net user" , "active directory users , computers" have different mechanics getting same information , difference root of problem.  can shed light or tell me i'm way off

thank you,
sean


incedently sql server commands , errors below:

exec login = 'domain\username'

msg 15404, level 16, state 19, line 1
could not obtain information windows nt group/user ''domain\username', error code 0x5.

 

hi,

 

based on test, if user has permission read properties of user objects in active directory users , computers console, able view information of user accounts using command net user.

 

for further research, check following information:

 

·         how many domain controllers there in domain? please make sure replication works properly.

·         do users in domain encounter issue? please logon other user account , run net user command check result.

·         please use utility dsacls export acl of user object. example, if error "system error 5 has occurred.  access denied." when try view administrator account using command net user administrator /domain. then, please run following command export acl of administrator object:

dsacls cn=administrator,cn=users,dc=domain,dc=com > acl.txt

in addition, please let me know group user, run command net user, member of.

·         please run netmon on machine on run command capture network packets:

1) download , install network monitor 3.2 on machine:

microsoft network monitor 3.2
http://www.microsoft.com/downloads/details.aspx?familyid=f4db40af-1e08-4a21-a26b-ec2f4dc4190d&displaylang=en

2)    log onto machines, right-click the netmon icon , select run administrator launch netmon3.2.

3)    the microsoft network monitor 3.2 window, click create new capture tab.

4)    in new tab, select network adapters in the select networks window.

5)    press f10 start netmon on machine.

6)    run command net user administrator /domain reproduce issue.

7)    after error, go netmon window , press f11 stop netmon.

8)    press ctrl+s save netmon files

note: please let me know ip address of machine , domain controllers.

 

after that, please zip , upload information above following space:

 

https://sftasia.one.microsoft.com/choosetransfer.aspx?key=303ec7f9-4db4-4bd2-b800-914898063f2b

password: ndnm_0uyc23

Windows Server  >  Directory Services