Adding Domain User to local Administrators Group in XP. Active Directory under 2000 Server.
Posted on 2004-08-26
I am trying to add the domain account to the local administrators group on an XP machine, which is under a 2000 Server running Active Directory.
Basically, when a user logs in using his/her domain account he/she must be a local administrator, but not a Domain Administrator.
On the XP machine, I goto computer management -> Groups -> right-click Administrators -> Add to Group -> Add.
Then, I try adding "DOMAIN\user", and I get "The object named "DOMAIN\user" is not from a domain listed in the Select Location dialog box, and is therefore not valid."
Basically, it cannot see the Domain, even though I have joined the domain, and am able to login to the domain.
I can login as Domain Administor, local Administrator, or Domain User, and in no case can I get this to work. I have also searched google, and found that DNS can cause this. I have verified that the Netbios name of the 2000 server resolves. The Netbios name for the XP machine was also already created in Active Directory after joining the domain.
What is wrong? BTW this is XP Professional.