Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Built-In Domain Objects not visible from Member Server

Posted on 2012-08-22
Medium Priority
Last Modified: 2012-09-18
We have a new Windows 2008 R2 domain which is functioning well with 2 domain controllers.  We have an old 2003 domain which we have DCPOMO'd out as  the last domain controller, then added it fresh as a member server to the new domain.

It works fine for the most part, but for some reason when we try to add security for a file share (any file share or NTFS security incl new ones) we can see all active directory users and groups apart from the Built-In ones.  I.e. "Administrators" is invisible, "Users" is invisible, but "Domain Admins" is fine.

A manual browse of A/D confirms this - we can browse to the Built-In folder, but groups such as "Administrators" is not visible.

I've confirmed that these are seen from the D/C and client PCs.
Question by:patrickfreer
  • 2
LVL 59

Expert Comment

by:Darius Ghassem
ID: 38321123
The groups you are not seeing are built-in local groups.

You would need to change to the local computer to add these groups.

If you want to add Users for the Domain you would need to use Domain Users

Author Comment

ID: 38321849
No - these are domain objects.  Please see the enclosed screenshots - one from a Domain controller showing where the objects are (and are expected to be) and the other from the member server which is unable to reference them.

Please note domain is redacted, not faulty.
LVL 59

Accepted Solution

Darius Ghassem earned 1500 total points
ID: 38336519
These are not there for permissions but instead are used for user rights assignments.

Expert Comment

ID: 38381520
What happens when you do not type anything in and try to search?  

It should populate ALL of the groups including the group you are looking to add. If this does not show anything, then something might be wrong with directory services (check event logs for errors).

Also, is this a cloned machine, a machine that is being replaced, VM, or brand new machine?

Please let me know if this helps...  Thank you!

Featured Post

Free Backup Tool for VMware and Hyper-V

Restore full virtual machine or individual guest files from 19 common file systems directly from the backup file. Schedule VM backups with PowerShell scripts. Set desired time, lean back and let the script to notify you via email upon completion.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
It’s time for spooky stories and consuming way too much sugar, including the many treats we’ve whipped for you in the world of tech. Check it out!
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

577 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question