Re: Problem with domain local and global groups

From: Joe Richards [MVP] (humorexpress_at_hotmail.com)
Date: 07/07/04 

Date: Wed, 07 Jul 2004 15:38:30 -0400

Are you in mixed mode? DLGs aren't available to domain members in mixed mode. 

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net
SA wrote:
> Hi all,
> I have a W23K domain and I have a problem with regards to the domain global
> and local groups.  I am trying to follow AGLP and putting the global groups
> in the local groups to which I am trying to assign the permissions.
> 
> This is where the problem comes in.  When I am on the DC I can see the
> domain local groups to assign the permissions.  But when I am on another
> server and try to assign the permissions to a domain local group I cannot
> find the group?
> 
> Why is this?  Thanks,
> SA.
> 
>

Relevant Pages

  • Re: Bug - File Server Migration Tool
    ... running in mixed mode, local groups on BDC are also domain local groups, so ... > BDC to a W2K3 member server in mixed mode AD. ... > File share on the BDC had permissions applied using local ... > Point is why didn't the FSMT flag this as an error? ...
    (microsoft.public.windows.file_system)
  • Re: File Server Migration Tool
    ... running in mixed mode, local groups on BDC are also domain local groups, so ... > BDC to a W2K3 member server in mixed mode AD. ... > File share on the BDC had permissions applied using local ...
    (microsoft.public.windows.server.migration)
  • Re: Problem with domain local and global groups
    ... > Are you in mixed mode? ... >> in the local groups to which I am trying to assign the permissions. ... >> domain local groups to assign the permissions. ...
    (microsoft.public.win2000.active_directory)
  • Re: Problem with domain local and global groups
    ... If you mean is there a way to get domain local group scope on members other than ... then you are stuck with mixed mode. ... >>>in the local groups to which I am trying to assign the permissions. ...
    (microsoft.public.win2000.active_directory)
  • Re: AD Groups + A,G,DL,P theory
    ... That is accounts go into global groups, global groups go into local groups and the local groups get permissions. ... Once you went to multiple domain it had quite a few holes in it as anyone who has run a large environment will tell you. ... The more practical solution is to have as few groups as possible and keep the permissions assigned as close to the resources as possible but even that is simply a guideline, it depends entirely on your structure and how you feel about doing things. ...
    (microsoft.public.windows.server.active_directory)