Option to create a 'Universal Group' is grayed out after selecting the 'Security' option under 'Grou (NETIQKB39372)

fact
Directory and Resource Administrator 7.0 SP1

fact
Microsoft Windows 2003

symptom
Option to create a 'Universal Group' is grayed out after selecting the 'Security' option under 'Group scope'.

symptom
Assistant Admins are unable to create a Universal Security group using Directory and Resource Administrator in a Windows 2003 Active Directory domain running in Native Mode.

symptom
When attempting to create a group in a Windows 2003 domain after selecting the Security option in the Create Group Wizard under Group scope, the Universal option is grayed out. 

cause
DRA is incorrectly seeing Microsoft Windows 2003 Native domains as mixed mode domains.

fix

This issue is addressed in NetIQ Directory and Resource Administrator and Exchange Administrator version 7.0 SP1 Hotfix 39372.

Hotfix 39372 corrects this issue when attempting to create universal security groups on native Microsoft Windows 2003 domains.  Those experiencing this issue would see that the
Universal radio button was unavailable when attempting to create a security group using the Group Create wizard.

Note: This Hotfix requires DRA version 7.0 SP1.

To download and install this hotfix:

1.  Run the DRA70001_Hotfix39372.msi file on each Administration server.
   

Note: If you are already managing your Microsoft Windows 2003 domains, you need to remove them and add them again for the hotfix to take effect. After installing the hotfix, newly added domains function correctly.

This hotfix modifies the Accounts.dll file on your Administration server computers. By default, this file is located in the Program Files\NetIQ\DRA folder.

For more information, please contact NetIQ Technical Support at www.netiq.com/support.

Formerly known as NETIQKB39372