We help IT Professionals succeed at work.

Check out our new AWS podcast with Certified Expert, Phil Phillips! Listen to "How to Execute a Seamless AWS Migration" on EE or on your favorite podcast platform. Listen Now

x

Apply Domain Local Groups on Member Servers

NTGuru705
NTGuru705 asked
on
Medium Priority
283 Views
Last Modified: 2010-04-13
I have a problem that I just discovered.  It seems that I am unable to apply permissions for any Domain Local Groups on any of my member servers?  I can apply fine on the domain controllers but not on any member server... is there something special I need to to to allow domain local groups to be applied on the member servers?

If I was not clear I am trying to apply security to directories/files.

Thank you for your help.

Austin Henderson
Comment
Watch Question

CERTIFIED EXPERT
Most Valuable Expert 2019
Most Valuable Expert 2018

Commented:
Your domain is probably still running in mixed mode. For domain local groups to be available on member servers, you'll need to switch your domain to native mode, otherwise they'll behave like local groups on NT4 DCs.
As long as you don't have any leftover NT4 BDCs or plan to add NT4 BDCs, you should be able to switch over without problems.

Members of a Domain Local Group Are Not Granted Rights
http://support.microsoft.com/?kbid=260534

Modes Supported by Windows 2000 Domain Controllers
http://support.microsoft.com/?kbid=186153

Group Type and Scope Usage in Windows
http://support.microsoft.com/?kbid=231273

Author

Commented:
This is right on..
Here is the problem.. we are running an Exchange 5.5 box that at one time was a BDC (technically still is) for my NT 4 domain that is now mixed mode with three 2K DCs and this NT 4 box.... there is no way for me to go native because of this box is there... ?
CERTIFIED EXPERT
Most Valuable Expert 2019
Most Valuable Expert 2018
Commented:
Unlock this solution with a free trial preview.
(No credit card required)
Get Preview

Author

Commented:
The problem is I cant do that.  It is a NAS device and the Domain Local groups are on one of my domain controllers... the disk space that I bought is where I need to apply the permissions... and there are a ton of groups that have been created for this purpose. Previously we had no troubles because the disks that these permissions were applied to were ON the DC.. but we are taking that burdon off the DC and putting it on the NAS device... thus my problem has been revealed.

Perhaps my exchange upgrade is quicker that planned.

Author

Commented:
I am looking at using ... UPromote..

http://utools.com/UPromote.asp

Anyone have any experience with this tool.. if it were not for Exchange 5.5 running on this box I would just pull the trigger on this tool but I hesitate because of Exch 5.5 on it.

Thanks
CERTIFIED EXPERT
Most Valuable Expert 2019
Most Valuable Expert 2018

Commented:
Well, that's exactly the tool I meant, but I don't have any experience with it, sorry; and I guess you found http://utools.com/Exchange.asp already.
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a free trial preview!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.