Solved

Domain local group does not appear on domain member computers

Posted on 2004-08-25
6
334 Views
Last Modified: 2010-04-19
1. I have a printer that is attached to a workstation and would like to share it by granting access to a Domain Local Group. However, at the workstation, Domain Local Group do not appear to be available for selection under security tab when I try to share it. But Domain Global Group does show up.

I thought that Domain Local Group are available within the domain only so that all the domain members should be able to see them.

2. Can a Global Group be a member of another Global Group? I cannot make it what way, but it seems that a Global Group can be a member of Domain Local Group.

Lastly, if I have a folderresiding on another machine which is a domain member, what is the best way to share it. I was thinking of creating a Domain Local Group and granting rights to this group, then, add the already established Global Group to this Domain Local Group, but then I got stuck with the issue in #1...
0
Comment
Question by:SC2002Admin
  • 3
  • 2
6 Comments
 
LVL 83

Accepted Solution

by:
oBdA earned 500 total points
ID: 11890764
Your domain is still running in "Windows 2000 Mixed" mode. Domain Local Groups and nesting of global groups are only possible in (at least) the "Windows 2000 Native" domain functional level. If you don't have Windows NT4 BDCs (and don't plan to introduce any), you can raise the functional level to W2k Native. If you don't have Windows 2000 DCs either, you can switch to Server 2003 domain and forest functional level.
Here's more information:
HOW TO: Raise Domain and Forest Functional Levels in Windows Server 2003
http://support.microsoft.com/?kbid=322692
0
 
LVL 6

Expert Comment

by:karel_jespers
ID: 11891541
for 1. you must create on your workstation a local group ..
and
the domain local group is only available to host recources on dc's
0
 
LVL 83

Expert Comment

by:oBdA
ID: 11892432
karel_jespers,
the scope of a domain local group in a W2k(3) domain is *only* limited to DCs while the domain is still running in mixed mode. Once the domain is running in native mode, domain local groups will be available for permission assignment on any domain member that's running W2k or later.

Domain Local Groups Cannot Be Used in Mixed-Mode Domain
http://support.microsoft.com/?kbid=296369
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 6

Expert Comment

by:karel_jespers
ID: 11892911

that is right, but is it necessairy for him to go native mode, only to fix that sharing problem of a printer
0
 
LVL 83

Expert Comment

by:oBdA
ID: 11893171
karel_jespers,
I'd see it the other way: Assuming that there are no downlevel DCs, why stay in mixed mode? Domain local groups where developed to make administration easier, so if possible, you might as well profit from it.
Apart from that, SC2002Admin was querying about features of an AD domain that he knew "should be there", so telling him that "the domain local group is only available to host recources on dc's" is rather misleading.

SC2002Admin,
before I forget it, the approach in your last question is the correct one.
0
 

Author Comment

by:SC2002Admin
ID: 11901212
Thaks oBdA, I got it working the way I thought it would work now.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
Concerto provides fully managed cloud services and the expertise to provide an easy and reliable route to the cloud. Our best-in-class solutions help you address the toughest IT challenges, find new efficiencies and deliver the best application expe…

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now