Re: Group Domain Admins cannot be found

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Hello SteveB,

Have a look here about group scopes, nesting and where they can be created:
http://technet.microsoft.com/en-us/library/cc755692.aspx

http://technet.microsoft.com/en-us/library/cc776499.aspx

http://technet.microsoft.com/en-us/library/cc781251.aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


thanks for the prompt reply Craig.

The group was a global group. Yes, I did try the Advanced Find as well

Changing the Domain Functional level (mode) appears to have fixed my
problem, it appears that global security groups are considered as
Universal Security groups when it comes to the restriction.

I think the reasoning is:

In Windows 2000 Mixed mode (the default mode on install) Universal
groups (includes Global??) are only enabled for distribution groups,
it is disabled for Security groups.

Changing mode to Windows 2000 Native mode enables Universal groups for
security groups too.

There are a couple of other differences as well.

It has certainly enabled me to add the group!

It seems whoever installed the AD just accepted the defaults even
though there were no NT machines. I do have W2k servers as well as
w2k3
so I have not raised the level to Windows 2003 interim or native mode
yet.
Wonder what happens when I introduce a couple of 2008 servers ;)

Steve B

http://forums.techarena.in



.

Relevant Pages

  • Re: Security groups ACL lists
    ... There is no comprehensive tool to do this and I expect if anyone even gets close to writing one it will be pretty expensive. ... Joe Richards Microsoft MVP Windows Server Directory Services ... check what types of permissions users and security groups have to specific ... without have to go through all the clients and servers one by ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group Domain Admins cannot be found
    ... Changing the Domain Functional level appears to have fixed my ... Universal Security groups when it comes to the restriction. ... In Windows 2000 Mixed mode Universal ... Changing mode to Windows 2000 Native mode enables Universal groups for ...
    (microsoft.public.windows.server.active_directory)
  • Re: Windows Security Roles
    ... Does Windows 2000 Server support this as well? ... there are issues with using AzMan for this. ... It is useful to allow nested groups, and have a heirarchy of users, user ... We think that we are able to shift to only be using AD Security groups, ...
    (microsoft.public.dotnet.security)
  • Re: NDIS-SDIO Driver
    ... enables the interrupt of a function ... // Send the IO request down to the bus driver ... The version number of Windows Driver Foundation ...
    (microsoft.public.development.device.drivers)
  • Re: SBS 2003: timeouts and problems with internet
    ... Meanwhile i noticed Windows Update is working on this Server. ... This update enables ... Windows SBS Backup has not been configured. ...
    (microsoft.public.windows.server.sbs)