RE: SQL login setup and windows 2000 domain local group

From: Gary Whitley [MSFT] (garyw_at_online.microsoft.com)
Date: 11/25/03 

Date: Tue, 25 Nov 2003 00:43:54 GMT

Hi Brenda,

I tested this on my server today. I duplicated the symptom you observein
the GUI when adding logins. Here is how I made this work.

1. Windows 2000 must be running in native mode, not mixed mode. When
running in mixed mode, the domain local groups are only scoped at the
domain controller level.
2. Even when running in native mode, the domain local groups are not
displayed in the GUI. However, you can add the domain local group by
typing the group name.

After I added the domain local group, I was able to log into SQL Server
with a test account in the domain that is a member of that domain local
group.

Please verify your domain is running in native mode. If so, this technique
should work for you.

Thank you.

Gary Whitley

This posting is provided "AS IS" with no warranties, and confers no rights.

Relevant Pages

  • Re: Native mode... what now.
    ... If you want to nest groups of the same type (e.g., global groups into other ... global groups or domain local groups into other domain local groups), ... Are you saying that I must use native mode in order to nest groups? ...
    (microsoft.public.windows.server.active_directory)
  • Re: cant see domain local groups
    ... As Domain Local groups cannot be members of workstation Local Groups ... I am wondering why MS added the functionality in Native Mode and what ... >> only see the listing of global groups and users, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain local groups problem
    ... domain local groups are only available on member servers when in at least ...
    (microsoft.public.windows.server.active_directory)
  • RE: Domain local group missing
    ... One more quick question if I may. Mixed mode vs. native ... >Domain local groups only exist on domain controllers ... >in native mode. ...
    (microsoft.public.win2000.security)
  • Re: how to add NT domain local group security on win2000
    ... Then what will be the correct procedures to upgrade a NT file server to a ... > 148639 Domain Local Groups Added By Clicking Search in File Manager ... > permissions of the resource to the global group. ... > |All the files security right are assigned using the NT Domain Local ...
    (microsoft.public.windows.server.migration)