How can I get the Enterprise Admins to be listed as universal under group scope

Posted on 2011-10-18
Last Modified: 2012-05-12
I'm preparing to migrate my domain from a windows 2000 domain to a windows 2008 domain. In preparation for this undertaking I'm building a lab environment to be like our current enviroment before I migrate it to windows 2008. I've discovered that in our real life domain the Enterprise Admins group is listed as being Universal under Group Scope and Security under Group Type on the general tab in AD. However, when I check the Enterprise Admins group in my lab environment it is listed as Global under Group Scope and Security under Group Type on the general tab in AD. How can I change the Enterprise Admin group in my lab environment from being in Global under group scope to Universal under group scope on the general tab?
Question by:cheyliger
    LVL 57

    Accepted Solution

    Can you check the domain functional level in your lab

    From the link "When the domain functional level is set to Windows 2000 mixed or Windows Server 2003 interim, security groups with universal scope cannot be created, although distribution groups with universal scope are still permitted."



    Author Comment

    Thanks mkline71, the article that you recommended resolved the issue.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Join & Write a Comment

    Suggested Solutions

    I had to do a bit of research to find the answer to this question so I thought I'd share my results.  Due to our outdated mainframe systems, we need to downgrade IE9 to IE8 in order to stay compatible.  We also needed to downgrade Java.  In order to…
    Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
    This Micro Tutorial will demonstrate how to add subdomains to your content reports. This can be very importing in having a site with multiple subdomains.

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now