Allow workgroup users to assign premissions on domain account

We' have a AD domain (Windows 2K3, SP2), 1 PC located at workgroup for some reason, 1 day, the user reported that her share was no longer avaiable. Here's what we observed:
under security tab, originally premission for particular domain user account was translated into "unknown user" and SID; When I press the "Add" in order to add back the premission again, under "object types", "computers" options was not there; under "location", it just allow me to select workgroup PC only. And according to our users, they could select computers and users on the domain before. But I just cann't figure out how it should be.

I've tried to enable the "Allow anonymous SID/Name Transaltion" from our AD's security policy, but it doesn't work.

The users requests to add premissions for particular domain users for some purpose. She doesn't want to add identical local user in her PC as she don't want too local account.

How I could archive this? & What's going wrong here?
1.GIF
lamtl354Asked:
Who is Participating?
 
lamtl354Connect With a Mentor Author Commented:
To abhvp, sorry the setting is made by workmate who left the company years, and nobodies in the office remembered.
0
 
Abhay PujariCommented:
Are you doing this on a client machine? If yes, then you need to authenticate to the domain firse By going to start--run and type \\yourdomainname. Type username and password of admin account of the domain, then try this addition.
0
 
lamtl354Author Commented:
I will tried tommorrow. Thx~
0
Never miss a deadline with monday.com

The revolutionary project management tool is here!   Plan visually with a single glance and make sure your projects get done.

 
lamtl354Author Commented:
To abhvp, it's the same. In the ACL dialog box, no matter "Location" or "Object Type" or even type username@domain_name, it fails to locate domain users.



0
 
Abhay PujariCommented:
What about typing \\yourdomainname in run dialog box? Does it prompt you for address? Also check your DNS server whether it contains records for this computer.

0
 
lamtl354Author Commented:
When I type \\domain, it doesn't prompt anything & allow me to access certain resources. I've checked w/ the client computer doesn't use domain credential. It shows only some "share" on that server, which opens to everyone.
0
 
Abhay PujariCommented:
Ok. If I am not wrong you have granted permissions to this computer account and now it seems that everything is changed. Do you remember the last time when it was working? Also have you done nay changes since then to this?
0
 
Abhay PujariCommented:
ok. Is it possible for you to join this machine to the domain?
0
All Courses

From novice to tech pro — start learning today.