RE: how to add NT domain local group security on win2000

From: Joe Wu [MSFT] (joewu_at_online.microsoft.com)
Date: 02/23/04


Date: Mon, 23 Feb 2004 08:29:01 GMT

Hello EL,

Thank you for your post. My name is Joe Wu, and it is my pleasure to work
with you on this issue.

In Windows NT domain, the domain local groups can only be used on domain
controllers. The problem has been explained in the following KB:

148639 Domain Local Groups Added By Clicking Search in File Manager
http://support.microsoft.com/?id=148639

To work around this issue, pelase add the users that you want to access
resources to a global group on the domain, and add the appropriate
permissions of the resource to the global group.

I hope this helps. Thanks and have a great day!

Regards,
Joe Wu
Product Support Services
Microsoft Corporation

Get Secure! - www.microsoft.com/security

====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
|From: "EL" <lengzai@msn.com>
|Subject: how to add NT domain local group security on win2000
|Date: Sun, 22 Feb 2004 13:48:28 +0800
|Lines: 25
|X-Priority: 3
|X-MSMail-Priority: Normal
|X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
|X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
|Message-ID: <OkJX#bQ#DHA.452@TK2MSFTNGP11.phx.gbl>
|Newsgroups: microsoft.public.windows.server.migration
|NNTP-Posting-Host: 203.194.169.101
|Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP11.phx.gbl
|Xref: cpmsftngxa06.phx.gbl microsoft.public.windows.server.migration:8139
|X-Tomcat-NG: microsoft.public.windows.server.migration
|
|There is a NT Domain(PDC) and a "NT FILE SERVER".
|I upgrade the "NT FILE SERVER" to another powerful Machince with WIN2000 OS
|installed.
|I use the "Scopy" to copy all the security right from the old "NT FILE
|SERVER" to a new powerful machince "WIN2000 Stand alone server"
|
|I can successfully migrate all the security right to the new 2000 server.
|However after migrations all the users can't access the files on new file
|server, access denied.
|All the files security right are assigned using the NT Domain Local Group.
|I found that in Win2000, i can't assign the Domain Local Group security
|right to files.
|I can only see the Domain Grobal Group and all Domain users.
|
|I think this is the problem why after successfuly migrate the security
right
|from old server to new server, all users don't have the access right on the
|new server.
|
|Anyone can help? URGENT
|
|thanks
|
|EL
|
|
|



Relevant Pages

  • Re: Calling WNetAddConnection() from a service
    ... You can do it by specifying any security context or by using the computer's security context if you are using kerberos for authentication. ... Joe Richards Microsoft MVP Windows Server Directory Services ... These products communicate on a port to an application that runs on the server. ... I need the service to find network drives while not logged in and assign them drive letters. ...
    (microsoft.public.platformsdk.security)
  • Re: how to add NT domain local group security on win2000
    ... Since you cannot make the new server a domain controller ... or begin the planning process to implement Active Directory. ... > All the files security right are assigned using the NT Domain Local Group. ...
    (microsoft.public.windows.server.security)
  • how to add NT domain local group security on win2000
    ... I upgrade the "NT FILE SERVER" to another powerful Machince with WIN2000 OS ... I can successfully migrate all the security right to the new 2000 server. ... All the files security right are assigned using the NT Domain Local Group. ...
    (microsoft.public.windows.server.security)
  • How to add NT Domain local group access right on win2000 file server
    ... I upgrade the "NT FILE SERVER" to another powerful Machince with WIN2000 OS ... I can successfully migrate all the security right to the new 2000 server. ... All the files security right are assigned using the NT Domain Local Group. ...
    (microsoft.public.windows.server.setup)
  • how to add NT domain local group security on win2000
    ... I upgrade the "NT FILE SERVER" to another powerful Machince with WIN2000 OS ... I can successfully migrate all the security right to the new 2000 server. ... All the files security right are assigned using the NT Domain Local Group. ...
    (microsoft.public.windows.server.migration)

Quantcast