Re: Win2K can't see domain local group of a NT 4 pdc

From: Sylvie (sylviep_at_videotron.net)
Date: 03/22/05 

Date: Mon, 21 Mar 2005 21:07:25 -0500

Thank you Don.

Let me rephrase this. I have a NT 4 domain "mydomain". On the PDC of that
domain I created a local group "myLocalGroup". I also have Windows
NT4/2000/2003 servers, which are member servers of "mydomain" (so the same
NT 4 domain). Normally, I should be able to give access to "myLocalGroup"
on any files or directories of any of those member servers ("mydomain"). It
works perfectly well on all the NT4 servers but not on the Windows2000/2003
servers. They just can't see the domain local group "myLocalGroup".
This is a big problem for me since "mydomain" has trust relationships with
many other domains and using domain local group is the best way to give
acces to global groups of the other domains.

"Don Wilwol" <donwilwol@yahoo.com> wrote in message
news:%23IqiL3nLFHA.3016@TK2MSFTNGP15.phx.gbl...
> its by design, you can only add a domain local group in the domain its
> created in.
>
> --
> Hope it helps...........
>
> dw
>
> Don Wilwol
> Blog - http://spaces.msn.com/members/wilwol/
> Web - http://capital.net/~wilwol/dw.htm
> DonWilwol(REMOVE)@yahoo.com
>
> "Sylvie" <sylviep@videotron.net> wrote in message
> news:uiLQVtnLFHA.2492@TK2MSFTNGP14.phx.gbl...
> > Hi,
> >
> > Can anyone tell me why a Windows 2000 or 2003 member server of a NT 4
> > domain
> > can't see nor use the domain local groups ? Is it posible to fix this or
> > is
> > it "by design" ?
> >
> > tks
> >
> > Sylvie
> >
> >
>
>

Relevant Pages

  • Re: Is it possible to audit Domain Global Group in AD?
    ... All that's required to add to the local group is admin privs on (could be ... QAs building new servers as member of the Domain and add the Global Domain ... They setup bunch of Windows servers and add our Domain ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain-wide Print Operators Group - not working?
    ... on all servers and workstations. ... What this means is that if a machine has to resolve the SID it will resolve it to the local machine. ... Print Operators is a local group, which means if you add someone to the domain group, it only applies to domain controllers. ... You need to use the local group for member servers. ...
    (microsoft.public.windows.server.active_directory)
  • Re: delegation of printer administration...
    ... the impression that Print Operator only covered print servers and printers ... and not all printers on all servers in the domain. ... > a local group on the member servers, and give that group full control ...
    (microsoft.public.windows.server.active_directory)
  • Re: Small Simple VBscript Problem - Adding Users to Local Group
    ... "stuffing" the ad user in the local group. ... The above help is part of my full script which when complete will get ... strDomain = "MyDomain" ... objAdminGroup.Add strUser ...
    (microsoft.public.windows.server.scripting)
  • Group Policy
    ... I upgraded my 8 servers from NT4 ... >I am running Windows XP professional and am attempting ... >configure local group policies as we have an NT4 domain ...
    (microsoft.public.windowsxp.security_admin)