He added her back, told her to log off and on again, and the ticket closed.
But then his phone buzzed. Another alert. The HR-Share drive was inaccessible. Users were reporting "access denied" on a different folder. This time, it wasn't a locked account—it was a group membership issue. active directory users and computers command
But here's what Marcus realized that night: the true power of isn't the GUI—it's the command that launches it. dsa.msc is the key. He added her back, told her to log
He typed:
Instead of hunting through individual user objects, he used another command-line trick from the same console. He selected the HR department OU, clicked Find , and searched for a user, jdiaz . In her Member Of tab, he saw the problem: her primary group, HR-RW , was missing. A sync error had dropped her from the group. The HR-Share drive was inaccessible