cannot access domain local groups from a member server! - please help!

From: Paul E. (test_at_test.com)
Date: 09/17/03 

Date: Wed, 17 Sep 2003 16:34:07 +0100

Hi I just set up a new Windows 2000 server to do some file/print. I didn't
install it
as a DC as I didn't see the need for yet another (we have 3), and it will
make the server and network a bit more efficient, and so decided to go down
the route of setting it up as a Member Server. The problem I have is when
you set
permissions for a directory on a member server, you are not able to select
LOCAL domain groups, you can only select local groups on the local server,
NOT domain local groups. They just don't appear in the list. If you use the
search facility, you can assign the permissions but they don't work...You
get an access denied message. Any ideas?

The suggested workaround is to use global groups, but ths is not my prefered
way of doing things as i would like to stick to the microsoft model of
AGUDLP

Of course, if all our servers are DC's then the problem wouldn't occur,
but then all of them would have the extra burdeon of AD, increasing their
load and network traffic. Bummer huh?

Any way at all to get get domain local groups working on a member server
without using global groups?

Thanks for any responses!

Paul.

Relevant Pages

  • Re: NT4 BDC to Win2k3 server
    ... Well, if i now understand correctly, you are saying you want to upgrade your ... As long as you still have a PDC, the domain local groups will ... > Win2k3 server be a member server in the NT4 domain. ...
    (microsoft.public.windows.server.migration)
  • Re: 2005 Cluster Install Error
    ... solution of creating machine local groups to which I add Domain Global ... given they do document the machine local groups as SQL Server security ... > I can see the need to promote Machine Local Groups to Domain Local Groups ... > when we are talking about clusters because the level of scope. ...
    (microsoft.public.sqlserver.clustering)
  • Re: 2005 Cluster Install Error
    ... > solution of creating machine local groups to which I add Domain Global ... > given they do document the machine local groups as SQL Server security ... >> I can see the need to promote Machine Local Groups to Domain Local Groups ... >> when we are talking about clusters because the level of scope. ...
    (microsoft.public.sqlserver.clustering)
  • RE: file share migration
    ... migrate local groups from one server to another. ... You are right that the File Server Migration Wizard does not support ... MSVR-Migrator Key Benefits ...
    (microsoft.public.windows.server.migration)
  • Re: Quick Question - Whats the differance. . .
    ... > Local Groups are assigned access to resources ... > As already mentioned Server local groups can only be used to grant access ... > resources that are local to that Server, and can contain users or groups ... > where server owners/Domain Administrators are one and the same, ...
    (microsoft.public.windows.server.active_directory)