Solved

Why cannot I add "Administrators" (the built-in domain local group) to access network resources?

Posted on 2016-11-09
2
45 Views
Last Modified: 2016-11-09
I was taught to use a Domain Local group rather than a Global group for the resources. But I just found out I was not able to apply the built-in domain local group "Administrators" onto network resources while no problem with Domain Admins (a global group). Why is that?
0
Comment
Question by:Castlewood
2 Comments
 
LVL 3

Accepted Solution

by:
Sreejith Sugathan earned 500 total points
ID: 41880737
The Administrators group is a "Domain Local" and not a "Domain Global" and hence you cannot use it as a group when adding file security. On older OS like 2003 you will be able to  - but not from 2008 onwards. Will need to use the Domain Admins group instead.
0
 

Author Closing Comment

by:Castlewood
ID: 41881035
Got confirmed that the Built-in Domain Local groups can be applied only on the Domain Controllers. Other domain local groups than those built-in on AD are available to be applied on network resources of this domain.  

Besides, every server or workstation does have its own Built-in Administrators group, whose scope obviously is on the local computer only.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Last week, our Skyport webinar on “How to secure your Active Directory” (https://www.experts-exchange.com/videos/5810/Webinar-Is-Your-Active-Directory-as-Secure-as-You-Think.html?cid=Gene_Skyport) provided 218 attendees with a step-by-step guide for…
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

792 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question