Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 856
  • Last Modified:

Server 2008 R2 not seeing Builtin group

We just installed a 2008 R2 server on our 2003 Domain.  When I go to add users to folder security, I don't get the option to choose "Administrators" (or any group from the builtin container)  Why don't I see those groups?
0
tmckinney01
Asked:
tmckinney01
1 Solution
 
Ray_SingletonCommented:
Hi,

Please verify that you can see this server in Active Directory Users and Computers on the domain controller.

Once this is done, go to add users but make sure that 'Object Types' is set for 'Users, Service Accounts, or Groups' and the 'Location'  is set for your domain (yourdomain.com or yourdomain.local).

Please let me know if this worked for you and thank you for your time! :D
0
 
tmckinney01Author Commented:
Yes, the new server is listed under "Computers", since it is just a member server.  When I go to add a user, it is set properly to my domain, and the object type is correct.  None of the groups from "Builtin" show up.
0
 
Ray_SingletonCommented:
What happens when you do not type anything in?  

It should populate ALL of the groups including the group you are looking to add. If this does not show anything, then something might be wrong with directory services (check event logs for errors).

Also, is this a cloned machine, a machine that is being replaced, VM, or brand new machine?

Please let me know if this helps...  Thank you!
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
tmckinney01Author Commented:
This is a brand new machine.  When I go to Locations, and drill down to the Builtin container and then hit Find Now, it come us with a bunch of accounts I don't recognize; much different than the Builtin container on the actual domain controller.  Again, the domains is at 2003 level, and this is a 2008 R2 server, if that makes any difference.
0
 
David Johnson, CD, MVPOwnerCommented:
If it is a member of a domain then you lose access to local user accounts. This is because is is now a managed computer.  You have to do it from ADUC (Active Directory Users and Computers) and not Control Panel/Users

http://screencast.com/t/5h8atMfEC
http://www.screencast.com/t/7VE9aq7cUF

once created in ADUC you can then use control panel/users and add it to the administrators group.

I have a seperate security group that via gpo adds members of that group to the local users group.
0
 
tmckinney01Author Commented:
ve3ofa-

That was very entertaining, but you answered a question I didn't ask.  I can't see the Builtin domain group "Administrators" from my 2008 R2 Member server.  Why not?
0
 
Krzysztof PytkoActive Directory EngineerCommented:
Where do you try to find built-in users during that process ?
Are you searching for them in domain or on local server?

To be able to add user from built-in container, you need to search for it using domain name in location instead of local server name

Can you post also print screen from window, where you are adding users, please ?

Regards,
Krzysztof
0
 
barrykflCommented:
Are u sure the 2008 is a member not a DC ..i wondered.

Then u try make a administrator , will it prompt you error ? if it is it hide in somewhere only

Pls clarify it is member server or a DC member ? if member server , it is normal if u don;t see domain something XXXX but u can see built in  local administrators.

Pls also make sure you select right objects e.g. user, group, computers and right location domain when u share.

If the windows 2008 already being a DC , it is very normal u cannot see built in group as it already part of domain tree. Only domain admin u can see now. ( no more builtin)

Unless u demote to a member server just like pc join domain.
0
 
tmckinney01Author Commented:
Ok, I checked on another network and it seems as though you cannot add the "Administrators" group to folder permissions on a non domain controller.  Is this true?
0
 
tmckinney01Author Commented:
No answer.
0
 
tmckinney01Author Commented:
Question never answered.
0

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now