Solved

Adding Domain Admins global group from an NT 4 server to the local administrators group on 2003 server

Posted on 2004-10-06
3
179 Views
Last Modified: 2010-04-19
Hello,
I am trying to use the active directory migration tool (ADMT) to miigrate from an NT 4 server to a 2003 server box.  I have established a trust relationship, 2 way, between the two of them, and i have created a new local group on the NT server named "source domain$$$".  I have also imported the domain admins global group from the 2003 server to the administrators local group on the NT server.  I cannot figure out how to add domain admins global group from the NT box to the administrators local group on the 2003....
more specifically i cannot FIND the administrators local group on the 2003 server, do i have to add one? and if so, what users should i add to it??
0
Comment
Question by:dankstah1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
3 Comments
 
LVL 18

Accepted Solution

by:
luv2smile earned 250 total points
ID: 12240913
There is no local group on a windows 2003 server with active directory installed. There is a builtin admin account and builtin admin group, but this is not really the same as a local group on a say an xp machine. The admin group will give usuers full control in the domain.

See this article for information on the different security groups.

http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/sag_adgroups_9builtin_intro.asp
0
 
LVL 18

Expert Comment

by:luv2smile
ID: 12241008
What the migration tool is instructing is to simply add the group to the "administrators" group in active directory. But remember that users in this group have full domain control, not just control of the server you're working on.
0
 
LVL 18

Expert Comment

by:luv2smile
ID: 12241627
See this article for more information on groups in windows 2003 and how they are different than groups in nt.


http://www.svrops.com/svrops/documents/win2kgroups.htm
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Learn about cloud computing and its benefits for small business owners.
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
In an interesting question (https://www.experts-exchange.com/questions/29008360/) here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question