Overview

A user who is a member of too many Active Directory groups (at least 20) cannot access the GFI MailEssentials Web Interface (configuration or quarantine).

The following error is found in the debug logs:

"error ","SID","error: Getting User Groups: System.Threading.ThreadAbortException: Thread was being aborted. ; at System.DirectoryServices.Interop.UnsafeNativeMethods.IAds.GetEx(String bstrName, Object& value) ; at System.DirectoryServices.PropertyValueCollection.PopulateList() ; at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName) ; at System.DirectoryServices.PropertyCollection.get_Item(String propertyName) ; at System.DirectoryServices.ActiveDirectory.PropertyManager.GetPropertyValue(DirectoryContext context, DirectoryEntry directoryEntry, String propertyName) ; at System.DirectoryServices.ActiveDirectory.Forest.GetForest(DirectoryContext context) ; at System.DirectoryServices.AccountManagement.ADStoreCtx.GetGroupsMemberOf(Principal p) ; at System.DirectoryServices.AccountManagement.Principal.GetGroupsHelper() ; at MEC.Sid.GetSId.GetAuthorizationGroups(Principal group, List`1 foundSIDs) ; at MEC.Sid.GetSId.GetGroupSid(String username, List`1 groupList)" "error ","ConfigurationUI","Error: Application_AuthenticateRequest: System.Threading.ThreadAbortException: Thread was being aborted. ; at MEC.Sid.GetSId.GetGroupSid(String username, List`1 groupList) ; at Configuration.Global.Application_AuthenticateRequest(Object sender, EventArgs e)"

Environment

GFI MailEssentials 2014 and higher.

Resolution

To resolve this issue, a patch must be installed for MailEssentials 2015. First, verify that the issue is with the group membership by checking the MemberOf property for the user in Active Directory and make sure he is a member of many groups then follow these steps:

1. Upgrade to MailEssentials 2015 (if not already running this version).
2. Download and unzip the following patch: ME2015_PATCH_20150119_2415.zip (attached to this article).
3. Right-click the CAB file, and click Properties.
4. In the General tab, click Unblock.
5. Unpack the CAB file and the ZIP file within the CAB file.
6. Execute GFIPatchExecuter.exe.

If the issue is still not resolved, contact GFI Customer Support for assistance.