Link to home
Start Free TrialLog in
Avatar of tmckinney01
tmckinney01Flag for United States of America

asked on

Server 2008 R2 not seeing Builtin group

We just installed a 2008 R2 server on our 2003 Domain.  When I go to add users to folder security, I don't get the option to choose "Administrators" (or any group from the builtin container)  Why don't I see those groups?
Avatar of Ray_Singleton
Ray_Singleton
Flag of United States of America image

Hi,

Please verify that you can see this server in Active Directory Users and Computers on the domain controller.

Once this is done, go to add users but make sure that 'Object Types' is set for 'Users, Service Accounts, or Groups' and the 'Location'  is set for your domain (yourdomain.com or yourdomain.local).

Please let me know if this worked for you and thank you for your time! :D
Avatar of tmckinney01

ASKER

Yes, the new server is listed under "Computers", since it is just a member server.  When I go to add a user, it is set properly to my domain, and the object type is correct.  None of the groups from "Builtin" show up.
What happens when you do not type anything in?  

It should populate ALL of the groups including the group you are looking to add. If this does not show anything, then something might be wrong with directory services (check event logs for errors).

Also, is this a cloned machine, a machine that is being replaced, VM, or brand new machine?

Please let me know if this helps...  Thank you!
This is a brand new machine.  When I go to Locations, and drill down to the Builtin container and then hit Find Now, it come us with a bunch of accounts I don't recognize; much different than the Builtin container on the actual domain controller.  Again, the domains is at 2003 level, and this is a 2008 R2 server, if that makes any difference.
Avatar of David Johnson, CD
If it is a member of a domain then you lose access to local user accounts. This is because is is now a managed computer.  You have to do it from ADUC (Active Directory Users and Computers) and not Control Panel/Users

http://screencast.com/t/5h8atMfEC
http://www.screencast.com/t/7VE9aq7cUF

once created in ADUC you can then use control panel/users and add it to the administrators group.

I have a seperate security group that via gpo adds members of that group to the local users group.
ve3ofa-

That was very entertaining, but you answered a question I didn't ask.  I can't see the Builtin domain group "Administrators" from my 2008 R2 Member server.  Why not?
Where do you try to find built-in users during that process ?
Are you searching for them in domain or on local server?

To be able to add user from built-in container, you need to search for it using domain name in location instead of local server name

Can you post also print screen from window, where you are adding users, please ?

Regards,
Krzysztof
Are u sure the 2008 is a member not a DC ..i wondered.

Then u try make a administrator , will it prompt you error ? if it is it hide in somewhere only

Pls clarify it is member server or a DC member ? if member server , it is normal if u don;t see domain something XXXX but u can see built in  local administrators.

Pls also make sure you select right objects e.g. user, group, computers and right location domain when u share.

If the windows 2008 already being a DC , it is very normal u cannot see built in group as it already part of domain tree. Only domain admin u can see now. ( no more builtin)

Unless u demote to a member server just like pc join domain.
Ok, I checked on another network and it seems as though you cannot add the "Administrators" group to folder permissions on a non domain controller.  Is this true?
ASKER CERTIFIED SOLUTION
Avatar of tmckinney01
tmckinney01
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Question never answered.