Re: Pre-AD security group trouble

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 05/26/05 

Date: Thu, 26 May 2005 14:35:52 -0500

What is a pre-AD group?? Global and local groups are still the same as from
NT4.0. Universal and domain local groups are new to native mode AD. Did you
change the group type?? --- Steve

"you know who maybe" <nguser2u@spamnotAOL.com> wrote in message
news:1196s6oailn5798@news.supernews.com...
> We solved this by deleting the pre-AD group and creating a new one but I
> thought I'd share what happened.
>
> We tried to apply a permission for a group (all allowed except Full
> Control) to an entire folder tree but afterwards the child folders would
> list the group we added but it would give them no rights - none of the
> checkboxes were selected. Not matter how many times we would choose
> "apply to all folders" it would not work. Again, we'd see the group
> applied to every folder but the checkboxes were unchecked and not grayed
> out as is should be when inherited, right?. Finally, we created a new
> group and put the same members in the group and tried again and it worked
> great. then we deleted the old group. Frigging strange and a waste of an
> hour trying to figure it out. Moral of the story: I guess we need to
> watch out for old NT groups in AD.
>

Relevant Pages

  • Re: Pre-AD security group trouble
    ... > What is a pre-AD group?? ... Universal and domain local groups are new to native mode AD. ... >> Control) to an entire folder tree but afterwards the child folders would ... >> applied to every folder but the checkboxes were unchecked and not grayed ...
    (microsoft.public.windows.server.security)
  • Pre-AD security group trouble
    ... We solved this by deleting the pre-AD group and creating a new one but I ... We tried to apply a permission for a group ... folder but the checkboxes were unchecked and not grayed out as is should be ...
    (microsoft.public.windows.server.security)
  • Re: Shared Folder NTFS Permission Problems with Domain Accounts
    ... I just tried sharing the folder using Domain Users and it did indeed work. ... Odd thing was though that the domain was already in Server 2003 native mode. ... You cannot use LOCAL groups of the domain on non-DCs unless you are ...
    (microsoft.public.windows.server.general)
  • Re: Best practice for local folder security
    ... cert test then you are best to go with sing local groups and populating them ... What I mean by "Plus it keeps the folder security clean so you don't see all ... Go back and look at the folders NTFS permissions and you will see ... all those SID's and accounts unknown remnants when you view NTFS folder ...
    (microsoft.public.windows.server.general)
  • Re: Shared Folder NTFS Permission Problems with Domain Accounts
    ... I look after a firm which has two DCs and four more servers and I've ... I can share the folder without a problem and then when selecting NTFS ... You cannot use LOCAL groups of the domain on non-DCs unless you are ... I've created I just can't select any of the built-in security principals ...
    (microsoft.public.windows.server.general)