Repair Users and Groups features

  • Article

Published: March 10, 2011

Applies To: Windows Small Business Server 2011 Standard

Problem   The Windows SBS 2011 Standard Console displays an error that says “Data cannot be retrieved.” when you try to view the list of users in Users and Groups.

Solution   Restart Active Directory Domain Services (AD DS).

To restart AD DS

  1. Click Start, click Administrative Tools, and then click Services.

  2. On the User Account Control page, click Continue.

  3. Click Active Directory Domain Services, and then click Restart.

  4. In the Restart Other Services dialog box, click Yes.

If the issue still exists after restarting AD DS, visit the Microsoft Support website.

Problem   You cannot create a new user by using the Add a New User Account Wizard or the Add Multiple User Accounts Wizard.

Solution   Verify that the following services are started. Restart the services that are not started.

  • Active Directory Domain Services (AD DS)

Note

If AD DS is not started, you receive an error that says it is not started when you try to add new user accounts.

  • DNS Server

  • File Replication Service

  • Intersite Messaging

  • Kerberos Key Distribution Center

If AD DS is not started, restart it. For instructions about how to restart it, see To restart AD DS. If AD DS does not restart, visit the Microsoft Support website.

When AD DS restarts, use the native Active Directory tools to create a user account as follows:

To create a temporary user account by using the native Active Directory tools

  1. Click Start, click Administrative Tools, and then click Active Directory Users and Computers.

  2. On the User Account Control page, click Continue.

  3. In the Active Directory Users and Computers tree, click the name of the server that is running Windows SBS 2011 Standard.

  4. Click the icon for creating a new user.

  5. In the New Object – User dialog box, type the new user’s name and logon information, and then click Next.

  6. Type the new user’s password, select the desired password options, and then click Next.

  7. Verify the information, and then click Finish.

  8. Confirm that the new user account is created as follows:

    • In Active Directory Users and Computers, click <domain>.local, where <domain> is the name of the Windows SBS 2011 Standard domain.

      If the user account is successfully created, it appears in the Name field.

After verifying that the native Active Directory tools will create the test user account, delete the test account, and recreate it by using the Windows SBS 2011 Standard Console. If you cannot create the user account by using the native Active Directory tools, visit the Microsoft Support website.

To delete the user account that you created by using the native Active Directory tools

  1. In Active Directory Users and Computers, right-click the user account that you created, and then click Delete.

  2. In the confirmation dialog box, click Yes.

To recreate a user account by using the Windows SBS 2011 Standard Console

  1. Open the Windows SBS Console.

  2. On the navigation bar, click the Users and Groups tab, and then click Users.

  3. In the task pane, click Add a new user account. The Add New User Account Wizard appears.

  4. Follow the instructions to complete the wizard.

If you cannot recreate the user account by using the Windows SBS 2011 Standard Console, visit the Microsoft Support website.

Problem   You created a user account by using the Add a New User Account Wizard or the Add Multiple User Accounts Wizard, but a mailbox is not created for the account.

Solution   If a mailbox is not needed for the account, you can continue to use it without any modifications. If the user account does need a mailbox, delete the account, verify that Microsoft Exchange Server services are started, and then recreate the user account.

To delete the user account

  1. Open the Windows SBS Console.

  2. On the navigation bar, click the Users and Groups tab, and then click Users.

  3. Click the user account that you want to delete, and then in the task pane, click Remove user account.

  4. Confirm the deletion by clicking Yes.

To verify that the Exchange Server services are started

  1. Click Start, click Administrative Tools, and then click Services.

  2. On the User Account Control page, click Continue.

  3. Verify that the following services are started. Restart the services that are not started.

    • Microsoft Exchange Active Directory Topology Service

    • Microsoft Exchange Anti-spam Update

    • Microsoft Exchange File Distribution

    • Microsoft Exchange Information Store

    • Microsoft Exchange Mail Submission

    • Microsoft Exchange Mailbox Assistants

    • Microsoft Exchange Replication Service

    • Microsoft Exchange Search Indexer

    • Microsoft Exchange Service Host

    • Microsoft Exchange System Attendant

    • Microsoft Exchange Transport

    • Microsoft Exchange Transport Log Search

  4. If any of the services are not started, click them, and then click Restart.

    If any of the services do not restart, visit the Microsoft Support website.

    If any of the services are unavailable, you can create the user account without a mailbox, and then add the mailbox when the services become available by using the Exchange Management Console.

To add the mailbox by using the Exchange Management Console

  1. Click Start, click All Programs, click Microsoft Exchange Server 2007, and then click Exchange Management Console.

  2. On the User Account Control page, click Continue.

  3. Expand Recipient Configuration, and then click Mailbox.

  4. In Actions, click New Mailbox. The New Mailbox Wizard appears.

  5. Click User Mailbox, and then click Next.

  6. Click Existing users, and then click Add.

  7. In the Select User dialog box, click the user account that you created without the mailbox, click OK, and then click Next.

  8. In the New Mailbox dialog box, leave the alias as the default setting; and then for Mailbox Database, click Browse, click Mailbox Database, click OK, and then click Next.

  9. Click New, and then click Finish.

To add a new user account

  1. Open the Windows SBS Console.

  2. On the User Account Control page, click Continue.

  3. On the navigation bar, click the Users and Groups tab, and then click Users.

  4. In the task pane, click Add a new user account. The Add New User wizard appears.

  5. Follow the instructions to complete the wizard.

Problem   The Windows Windows SBS 2011 Standard Console displays an error that says “Data cannot be retrieved.” when you try to view the list of groups in Users and Groups.

Solution   Restart AD DS. See To restart AD DS.

If the issue still exists after restarting AD DS, visit the Microsoft Support website.

Problem   You cannot create a new group by using the Add a New Group Wizard.

Solution   Verify that the following services are started. Restart the services that are not started.

  • AD DS

  • DNS Server

  • File Replication Service

  • Intersite Messaging

  • Kerberos Key Distribution Center

If AD DS is not started, restart it. See To restart AD DS. If AD DS does not restart, visit the Microsoft Support website.

If AD DS restarts, try to create the group by using the Active Directory Users and Computers tool.

To create a group by using Active Directory Users and Computers

  1. Click Start, click Administrative Tools, and then click Active Directory Users and Computers.

  2. On the User Account Control page, click Continue.

  3. In the Active Directory Users and Computers tree, click the name of your server that is running Windows SBS 2011 Standard.

  4. Click the icon for creating a new group in the current container.

  5. In the New Object – Group dialog box, type a name for the new group.

  6. In Group scope, click Universal; and then for Group type, click the desired type.

  7. Click OK.

If you can create the group by using Active Directory Users and Computers, the problem is related to the Windows SBS 2011 Standard Console. If you cannot create the group by using Active Directory Users and Computers, the problem is related to Windows Server 2008. In either case, visit the Microsoft Support website.

Problem   You cannot create a security group that is mail-enabled.

Solution   Verify that Exchange Server services are started, and then try to mail-enable the security group by using the Exchange Server native management tools.

To verify that Exchange Server services are started

  1. Click Start, click Administrative Tools, and then click Services.

  2. On the User Account Control page, click Continue.

  3. Verify that the following services are started. Restart the services that are not started.

    • Microsoft Exchange Active Directory Topology Service

    • Microsoft Exchange Anti-spam Update

    • Microsoft Exchange File Distribution

    • Microsoft Exchange Information Store

    • Microsoft Exchange Mail Submission

    • Microsoft Exchange Mailbox Assistants

    • Microsoft Exchange Replication Service

    • Microsoft Exchange Search Indexer

    • Microsoft Exchange Service Host

    • Microsoft Exchange System Attendant

    • Microsoft Exchange Transport

    • Microsoft Exchange Transport Log Search

  4. If any of the services are not started, click the service name, and then click Restart.

    If any of the services do not restart, visit the Microsoft Support website.

If all the services are started, try to mail-enable the security group by using the Exchange Server native management tools. For more information, see Mail-Enable or Mail-Disable a Security Group.