Re: Converting local groups to domain local groups

You can't convert, you need to recreate in the domain and repopulate with the membership, then apply the permissions wherever the local groups are used. I am not aware of any tools that do this end to end but subinacl can assist in the ACLing process but you need to know what ACLs contain the group currently. It won't try to go figure that out for you.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


Trilix wrote:
Hi,

We need to get rid of our local groups, because of our WAFS implementation, so I think the best way is to make domain local groups. Is there an easy way to convert local groups to domain local groups? A freeware util maybe?

Kind regards
.

Relevant Pages

  • Re: NT4 BDC to Win2k3 server
    ... Well, if i now understand correctly, you are saying you want to upgrade your ... As long as you still have a PDC, the domain local groups will ... > Win2k3 server be a member server in the NT4 domain. ...
    (microsoft.public.windows.server.migration)
  • Re: 2005 Cluster Install Error
    ... solution of creating machine local groups to which I add Domain Global ... given they do document the machine local groups as SQL Server security ... > I can see the need to promote Machine Local Groups to Domain Local Groups ... > when we are talking about clusters because the level of scope. ...
    (microsoft.public.sqlserver.clustering)
  • Re: 2005 Cluster Install Error
    ... > solution of creating machine local groups to which I add Domain Global ... > given they do document the machine local groups as SQL Server security ... >> I can see the need to promote Machine Local Groups to Domain Local Groups ... >> when we are talking about clusters because the level of scope. ...
    (microsoft.public.sqlserver.clustering)
  • Re: Problem with domain local and global groups
    ... > Are you in mixed mode? ... >> in the local groups to which I am trying to assign the permissions. ... >> domain local groups to assign the permissions. ...
    (microsoft.public.win2000.active_directory)
  • Re: A-G-DL-P strategy
    ... I believe you are referring to Domain Local groups, ... You can use Domain Local groups as per the recommendation - and the ... cannot see these groups on your member servers if because you are still ...
    (microsoft.public.windows.server.active_directory)