selected domain is read only and cannot be used as a target

hi all,

 

i'm getting the below error when importing clients to the policy manager.user has full access rights.any idea?

 

"selected domain is read only and cannot be used as a target"

 

 

thanks

 

 

 

 

once you create an ad synchronization rule and bind it to a domain, this domain (and everything below it in the domain tree) becomes read-only: the underlying structure is taken from the ad and can't be modified manually. if you want to add some hosts manually, you need to create a policy domain outside this ad-managed domain, and add hosts there.

 

please note that if you bind an ad synchronization rule to the 'root' domain, then the entire tree becomes read-only. in situations like yours, if you want to keep the ability to add hosts manually, you should bind the rules to the dedicated sub-domains in the domain tree, not the 'root'.