Re: how to add NT domain local group security on win2000

From: Roger Abell [MVP] (mvpNoSpam_at_asu.edu)
Date: 02/24/04

  • Next message: Roger Abell [MVP]: "Re: Restricted Groups on standalone server"
    Date: Tue, 24 Feb 2004 00:44:33 -0700
    
    

    This is not a Group Policy issue.

    What you are seeing is how things are.
    Domain local groups in NT 4 are only usable on the
    domain controllers.
    Since you cannot make the new server a domain controller
    in your NT 4 domain without upgrading the domain to Active
    Directory, your choices are to reACL the new server with
    new groups in place of the domain locals that had been used,
    or begin the planning process to implement Active Directory.

    "EL" <lengzai@msn.com> wrote in message
    news:%239KsxPn%23DHA.2040@TK2MSFTNGP12.phx.gbl...
    > There is a NT Domain(PDC) and a "NT FILE SERVER".
    > I upgrade the "NT FILE SERVER" to another powerful Machince with WIN2000
    OS
    > installed.
    > I use the "Scopy" to copy all the security right from the old "NT FILE
    > SERVER" to a new powerful machince "WIN2000 Stand alone server"
    >
    > I can successfully migrate all the security right to the new 2000 server.
    > However after migrations all the users can't access the files on new file
    > server, access denied.
    > All the files security right are assigned using the NT Domain Local Group.
    > I found that in Win2000, i can't assign the Domain Local Group security
    > right to files.
    > I can only see the Domain Grobal Group and all Domain users.
    >
    > I think this is the problem why after successfuly migrate the security
    right
    > from old server to new server, all Domain local group users don't have the
    > access right on the
    > new server.
    >
    > Anyone can help? URGENT
    >
    > thanks
    >
    > EL
    >
    >
    >


  • Next message: Roger Abell [MVP]: "Re: Restricted Groups on standalone server"

    Relevant Pages

    • RE: how to add NT domain local group security on win2000
      ... My name is Joe Wu, and it is my pleasure to work ... |I upgrade the "NT FILE SERVER" to another powerful Machince with WIN2000 OS ... |I use the "Scopy" to copy all the security right from the old "NT FILE ... |All the files security right are assigned using the NT Domain Local Group. ...
      (microsoft.public.windows.server.migration)
    • RE: Local groups migration
      ... local SAM database of the member server the users are denied access. ... In cases where the Domain Local Group had more than one Global Group as ... No domain migration ever occurred, no protar.mdb existed, it does not ...
      (microsoft.public.windows.server.migration)
    • RE: question on using migration tool and user groups
      ... member on the right, separated by a comma. ... In cases where the Domain Local Group had more than one Global Group as ... We installed ADMTv2 on the W2K3 member server holding the migrated data ... >>to the folder, I created a salesman group, gave it full rights to the ...
      (microsoft.public.windows.server.migration)
    • Re: External trust & resources sharing
      ... I think the problem is in SQL 2000 server. ... not possible to grant permissions to the domain local group on the database ... this sounds like you're not in native mode. ...
      (microsoft.public.windows.server.active_directory)
    • Re: question on using migration tool and user groups
      ... but I thought the point of the migration too was that you didnt have to do ... If the windows 2003 server is on the domain, why does it not recognize the ... To correct this we used Addusers.exe from the Windows 2000 Resource Kit ... > 1:1 mapping of Domain Local Group friendly names on the right, ...
      (microsoft.public.windows.server.migration)