tmckinney01
asked on
Server 2008 R2 not seeing Builtin group
We just installed a 2008 R2 server on our 2003 Domain. When I go to add users to folder security, I don't get the option to choose "Administrators" (or any group from the builtin container) Why don't I see those groups?
ASKER
Yes, the new server is listed under "Computers", since it is just a member server. When I go to add a user, it is set properly to my domain, and the object type is correct. None of the groups from "Builtin" show up.
What happens when you do not type anything in?
It should populate ALL of the groups including the group you are looking to add. If this does not show anything, then something might be wrong with directory services (check event logs for errors).
Also, is this a cloned machine, a machine that is being replaced, VM, or brand new machine?
Please let me know if this helps... Thank you!
It should populate ALL of the groups including the group you are looking to add. If this does not show anything, then something might be wrong with directory services (check event logs for errors).
Also, is this a cloned machine, a machine that is being replaced, VM, or brand new machine?
Please let me know if this helps... Thank you!
ASKER
This is a brand new machine. When I go to Locations, and drill down to the Builtin container and then hit Find Now, it come us with a bunch of accounts I don't recognize; much different than the Builtin container on the actual domain controller. Again, the domains is at 2003 level, and this is a 2008 R2 server, if that makes any difference.
If it is a member of a domain then you lose access to local user accounts. This is because is is now a managed computer. You have to do it from ADUC (Active Directory Users and Computers) and not Control Panel/Users
http://screencast.com/t/5h8atMfEC
http://www.screencast.com/t/7VE9aq7cUF
once created in ADUC you can then use control panel/users and add it to the administrators group.
I have a seperate security group that via gpo adds members of that group to the local users group.
http://screencast.com/t/5h8atMfEC
http://www.screencast.com/t/7VE9aq7cUF
once created in ADUC you can then use control panel/users and add it to the administrators group.
I have a seperate security group that via gpo adds members of that group to the local users group.
ASKER
ve3ofa-
That was very entertaining, but you answered a question I didn't ask. I can't see the Builtin domain group "Administrators" from my 2008 R2 Member server. Why not?
That was very entertaining, but you answered a question I didn't ask. I can't see the Builtin domain group "Administrators" from my 2008 R2 Member server. Why not?
Where do you try to find built-in users during that process ?
Are you searching for them in domain or on local server?
To be able to add user from built-in container, you need to search for it using domain name in location instead of local server name
Can you post also print screen from window, where you are adding users, please ?
Regards,
Krzysztof
Are you searching for them in domain or on local server?
To be able to add user from built-in container, you need to search for it using domain name in location instead of local server name
Can you post also print screen from window, where you are adding users, please ?
Regards,
Krzysztof
Are u sure the 2008 is a member not a DC ..i wondered.
Then u try make a administrator , will it prompt you error ? if it is it hide in somewhere only
Pls clarify it is member server or a DC member ? if member server , it is normal if u don;t see domain something XXXX but u can see built in local administrators.
Pls also make sure you select right objects e.g. user, group, computers and right location domain when u share.
If the windows 2008 already being a DC , it is very normal u cannot see built in group as it already part of domain tree. Only domain admin u can see now. ( no more builtin)
Unless u demote to a member server just like pc join domain.
Then u try make a administrator , will it prompt you error ? if it is it hide in somewhere only
Pls clarify it is member server or a DC member ? if member server , it is normal if u don;t see domain something XXXX but u can see built in local administrators.
Pls also make sure you select right objects e.g. user, group, computers and right location domain when u share.
If the windows 2008 already being a DC , it is very normal u cannot see built in group as it already part of domain tree. Only domain admin u can see now. ( no more builtin)
Unless u demote to a member server just like pc join domain.
ASKER
Ok, I checked on another network and it seems as though you cannot add the "Administrators" group to folder permissions on a non domain controller. Is this true?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Question never answered.
Please verify that you can see this server in Active Directory Users and Computers on the domain controller.
Once this is done, go to add users but make sure that 'Object Types' is set for 'Users, Service Accounts, or Groups' and the 'Location' is set for your domain (yourdomain.com or yourdomain.local).
Please let me know if this worked for you and thank you for your time! :D