SAP Knowledge Base Article - Preview

1645707 - Active Directory groups from a domain in the forest can't be added in the CMC


  • BusinessObjects Enterprise is installed in one Active Directory Domain environment (DOMAIN1) and groups from that domain are successfully mapped in the CMC.
  • A second domain (DOMAIN2) has a forest relationship with DOMAIN1.
  • When groups from DOMAIN2 are added in the CMC, the following error appears: 

The secWinAD plugin failed to look up the account for the group "DOMAIN2\ValidGroupName". Please enter non-local groups as DomainName\GroupName and local groups as \\ServerName\GroupName.



  • BusinessObjects Enterprise (BOE) 3.1 SP3
  • Active Directory 2003 forest and domain level


SAP BusinessObjects Business Intelligence platform R2 ; SAP BusinessObjects Enterprise XI 3.1


ad, sso, kerberos, vintela , KBA , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.