Re: Can't add administrator group to other groups.

EVERYONE is a well-known security principal, so it works a little
differently.

Administrators is a domain local group. If you wish to add this to an ACL
on anything other than a DC, you must be in Native mode (or higher). You
cannot add domain local groups into global groups.

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net


.

Relevant Pages

  • Re: Adding user from other domain to local group
    ... this is normal, since Administrators is a domain local group and such, there ... is no replication mecanism for these ... > him as a member of this group. ...
    (microsoft.public.win2000.security)
  • Re: Adding user from other domain to local group
    ... > this is normal, since Administrators is a domain local group and such, ... > Boris Skoblo wrote: ... >> not see that he a member of the group Administrators of my domain, ...
    (microsoft.public.win2000.security)