Re: Problems with giving the Domain Users group access to folders

From: corn29_at_ no_spam excite.com (corn29_at_excite.com)
Date: 07/30/04 

Date: 30 Jul 2004 09:13:08 -0700

I thought it was very curious behavior as well... especially with
regard to Domain Users "changing" to a local group. Local groups and
accounts are not allowed on our system by the security folks either.
At any rate, we're having some of the SID issues you mentioned below
as well. I'm starting to wonder is this comes from cloning/ghosting a
machine... at least that's when I see these problems raise their ugly
head. I did follow Q262958 (even though we're not getting any 1000 or
1053 errors) without any success.

So with all of this said, do you have any insight on how to clean up
the "bunch of numbers that are the unresolved sid for the group"?

Oh, BTW netdiag /fix fails on the DC with "[FATAL] Failed to get
system information of this machine". I'm NOT getting any DNS errors
(only browser errors - 8021 & 8032). Any ideas?

Thanks again!

--CW

"Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message news:<wq_Nc.174849$a24.97243@attbi_s03>...
> That's a new one on me. I have never seen a "none" group. The syntax also suggests
> that "none" is a local computer group. Try giving "users" from the local computer
> permissions to see if that works. The local users group on a domain computer contains
> the domain users group. Usually a group does not disappear, but instead you will see
> a bunch of numbers that are the unresolved sid for the group.
>
> It would be a good idea to give that computer a full virus scan with virus
> definitions up to date as of today since you are having unexplained behavior. Also
> run netdiag on it looking for any failed tests that may indicate a problem with
> domain access such as failed test/errors for dns, dc discover, kerberos, and domain
> membership-secure channel. nediag is part of the support tools on the install cdrom
> in the support/tools folder where you will need to run the setup program there. ---
> Steve
>
>
> "corn29@ no_spam excite.com" <corn29@excite.com> wrote in message
> news:216bf30e.0407281358.670a3d20@posting.google.com...
> > Hello,
> >
> > Having a problem here with giving the group Domain Users rights to
> > objects. For example, I have a \bin\ folder. I right click on this
> > folder and select the Security tab. Then I click Add..., choose
> > Domain Users from the Entire Directory, and give the group full
> > control from the checkboxes.
> >
> > Here's where the problem starts. Members of Domain Users still aren't
> > getting the access they need to \...\bin\. If I go back and check the
> > security settings for that folder, there's no Domain Users listing.
> > In its place is a "None" group. Its syntax is None(<<Local computer
> > name>>\None).
> >
> > How can I keep this from happening? No matter how many times I try to
> > add Domain users to an object, it always changes to the None group.
> >
> > Thanks,
> >
> > --CW

Relevant Pages

  • Re: localgroup administrators
    ... I took the original post at face value of "set a group ... policy to remove domain users and only add domain admins to local group ... administrators on workstations", which translates in my brain as a full ... admins to local group administrators on workstations. ...
    (microsoft.public.windows.group_policy)
  • Re: export users from a local group with domain membership
    ... >>domain users) and export them to ldf or whatever, ... >>The idea is I'm in the process of rebuilding a server, ... So I want a script where I could do a quick ... How can I generate a CSV file of all local group membership? ...
    (microsoft.public.scripting.vbscript)
  • Re: access only through Local groups
    ... Not an IIS issue. ... Create the local group and populate it with necessary domain users ... Enable Integrated authentication and remove anonymous authentication on ... group (loacl group in the IIS server, not any domain local group) how do I ...
    (microsoft.public.inetserver.iis.security)
  • Re: Local Group Membership not Persistent
    ... "Jerold Schulman" wrote in message ... Policy settings on the w2k SBS and can't find anything which might be ... How can I permanently add Domain Users to a local group? ...
    (microsoft.public.win2000.group_policy)
  • Re: access only through Local groups
    ... I created a group in the sever where IIS runs and added all required users to that local group. ... I given read permissions to this group to the web site document root folder ... finally I added the domain users to the web site permission list and it stated working to my requirement. ...
    (microsoft.public.inetserver.iis.security)