Solved

Domain local group does not appear on domain member computers

Posted on 2004-08-25
6
335 Views
Last Modified: 2010-04-19
1. I have a printer that is attached to a workstation and would like to share it by granting access to a Domain Local Group. However, at the workstation, Domain Local Group do not appear to be available for selection under security tab when I try to share it. But Domain Global Group does show up.

I thought that Domain Local Group are available within the domain only so that all the domain members should be able to see them.

2. Can a Global Group be a member of another Global Group? I cannot make it what way, but it seems that a Global Group can be a member of Domain Local Group.

Lastly, if I have a folderresiding on another machine which is a domain member, what is the best way to share it. I was thinking of creating a Domain Local Group and granting rights to this group, then, add the already established Global Group to this Domain Local Group, but then I got stuck with the issue in #1...
0
Comment
Question by:SC2002Admin
  • 3
  • 2
6 Comments
 
LVL 83

Accepted Solution

by:
oBdA earned 500 total points
ID: 11890764
Your domain is still running in "Windows 2000 Mixed" mode. Domain Local Groups and nesting of global groups are only possible in (at least) the "Windows 2000 Native" domain functional level. If you don't have Windows NT4 BDCs (and don't plan to introduce any), you can raise the functional level to W2k Native. If you don't have Windows 2000 DCs either, you can switch to Server 2003 domain and forest functional level.
Here's more information:
HOW TO: Raise Domain and Forest Functional Levels in Windows Server 2003
http://support.microsoft.com/?kbid=322692
0
 
LVL 6

Expert Comment

by:karel_jespers
ID: 11891541
for 1. you must create on your workstation a local group ..
and
the domain local group is only available to host recources on dc's
0
 
LVL 83

Expert Comment

by:oBdA
ID: 11892432
karel_jespers,
the scope of a domain local group in a W2k(3) domain is *only* limited to DCs while the domain is still running in mixed mode. Once the domain is running in native mode, domain local groups will be available for permission assignment on any domain member that's running W2k or later.

Domain Local Groups Cannot Be Used in Mixed-Mode Domain
http://support.microsoft.com/?kbid=296369
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 6

Expert Comment

by:karel_jespers
ID: 11892911

that is right, but is it necessairy for him to go native mode, only to fix that sharing problem of a printer
0
 
LVL 83

Expert Comment

by:oBdA
ID: 11893171
karel_jespers,
I'd see it the other way: Assuming that there are no downlevel DCs, why stay in mixed mode? Domain local groups where developed to make administration easier, so if possible, you might as well profit from it.
Apart from that, SC2002Admin was querying about features of an AD domain that he knew "should be there", so telling him that "the domain local group is only available to host recources on dc's" is rather misleading.

SC2002Admin,
before I forget it, the approach in your last question is the correct one.
0
 

Author Comment

by:SC2002Admin
ID: 11901212
Thaks oBdA, I got it working the way I thought it would work now.
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
This may not be a text book method to resolve VSS backup issues but it seemed to have worked on few of the Windows 2003 servers we had issues while performing a Volume Shadow Copy backup. If you have issues while performing a shadow copy backup usin…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question