Solved

Adding Domain Admins global group from an NT 4 server to the local administrators group on 2003 server

Posted on 2004-10-06
3
174 Views
Last Modified: 2010-04-19
Hello,
I am trying to use the active directory migration tool (ADMT) to miigrate from an NT 4 server to a 2003 server box.  I have established a trust relationship, 2 way, between the two of them, and i have created a new local group on the NT server named "source domain$$$".  I have also imported the domain admins global group from the 2003 server to the administrators local group on the NT server.  I cannot figure out how to add domain admins global group from the NT box to the administrators local group on the 2003....
more specifically i cannot FIND the administrators local group on the 2003 server, do i have to add one? and if so, what users should i add to it??
0
Comment
Question by:dankstah1
  • 3
3 Comments
 
LVL 18

Accepted Solution

by:
luv2smile earned 250 total points
ID: 12240913
There is no local group on a windows 2003 server with active directory installed. There is a builtin admin account and builtin admin group, but this is not really the same as a local group on a say an xp machine. The admin group will give usuers full control in the domain.

See this article for information on the different security groups.

http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/sag_adgroups_9builtin_intro.asp
0
 
LVL 18

Expert Comment

by:luv2smile
ID: 12241008
What the migration tool is instructing is to simply add the group to the "administrators" group in active directory. But remember that users in this group have full domain control, not just control of the server you're working on.
0
 
LVL 18

Expert Comment

by:luv2smile
ID: 12241627
See this article for more information on groups in windows 2003 and how they are different than groups in nt.


http://www.svrops.com/svrops/documents/win2kgroups.htm
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
Recently, I had the need to build a standalone system to run a point-of-sale system. I’m running this on a low-voltage Atom processor, so I wanted a light-weight operating system, but still needed Windows. I chose to use Microsoft Windows Server 200…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now