Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

MS AD Security Group Membership adding a local user

Posted on 2007-11-28
4
399 Views
Last Modified: 2010-04-21
I have a problem with trying to add a local user from a member server in my AD to a global security group. I don't see how to do this.
The only way I see of doing this is to create a group on the Local Server adding the network users and the one local user in the server to this group.

Can someone let me know if I can add a local user to an AD security group or if I have to go the route of creating the local group.
0
Comment
Question by:Ima Selco
  • 2
4 Comments
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 20370696
you cannot add a local group to a domain group, other way round yes, but not the way you are trying to do it
0
 
LVL 11

Accepted Solution

by:
bsharath earned 125 total points
ID: 20370986
ikeith

Create a user on the ADS and then add the user to the group...Change the option Do to Account tab >  log on to  and add the machine name of the server...So that the user cannot be used in any other machine...That way the user is restricted and your goal is done...
0
 

Author Comment

by:Ima Selco
ID: 20454411
Jay_jay70 I am not trying to add a local group to a domain group I am trying to add a local user from a member server to a domain group. My alternative is to create the local group adding the domain users not domain groups to it.
0
 

Author Closing Comment

by:Ima Selco
ID: 31411573
While this wasn't really what I wanted which was to add a local user to a domain group - can't do. Your solution works very well since I had to create a domain user which I added to a group on the member server. Now I can be assured that this account can only access that server which is what was really wanted. Thanks!
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
ACTIVE DIRECTORY, EXCHANGE 3 58
Weird issue with VMWare ESXi 6 host 3 61
Reset AD password via a webpage - Mac environment 6 41
active directory 6 13
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
This article explains the steps required to use the default Photos screensaver to display branding/corporate images
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

829 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question