Re: Domain Admins group missing

From: Brian Desmond [MVP] (desmondb_at_payton.cps.k12.il.us)
Date: 08/26/04 

Date: Wed, 25 Aug 2004 22:06:11 -0500

Ryan-

If I follow right (I have the doc), you need to add the Domain Admins group
for your new SBS03 domain to the local administrators group on each PC? If
so, the easiest way is with group policy. Open the default domain policy
(right click the domain in AD Users & Comps, goto the GP tab, edit the
default policy), browse to restricted groups under computer
config/Windows/Security Settings, and add to that list "Administrator" and
"YourDomain\Domain Administrators", where YourDomain is the NETBios name of
your domain. You can find the netbios name of the domain if you look at the
logon to drop down on any client workstation at the Ctrl Alt Del screen. 

-- 
-- 
Brian Desmond
Windows Server MVP
desmondb@payton.cps.k12.il.us
http://www.briandesmond.com
"Ryan D" <anonymous@discussions.microsoft.com> wrote in message
news:cb6f01c48a50$20af9090$a401280a@phx.gbl...
> I'm in the process of migrating an SBS 2000 domain into a
> SBS 2003 domain.  I am following the white paper
> titled "Migrating from SBS2000 to Windows SBS2003" step by
> step.
>
> I've already installed SBS2003 on the destination server.
> I've also successfully migrated one XP client to the new
> 2003 domain.
>
> However, when I tried to migrate another XP client today I
> ran into the following problem.
>
> According to Step 3, it says I need to add the Domain
> Admins group for the source server to the built-in
> Administrators group on any client computer.  The strange
> thing is that when I go to add this group it's not
> listed.  The only listed groups are the local computer
> groups.
>
> Am I using the wrong procedure to add groups?  I open the
> SBS2003 server console and select "Local users and
> groups", expand the groups folder, and select the
> properties of the built-in local administrator.  But when
> I try to add groups via Location button, it only lists the
> local computer domain.  It does not list the parent server.
>
> The other XP that I already migrated lists both the parent
> server and local computer via the Location button.
>
> What am I doing wrong?  How can I add the Domain Admins
> group to my built-in Administrators group?
>
> I noticed that this SBS2000 XP doesn't include the
> username "Administrator" for the SBS2000 domain in the
> control panel->User Accounts window.  The only SBS2000
> domain account it includes is a username titled "ckeith"
> with administrator rights in the domain.  Also, it
> includes a username that it says belongs to the local
> computer domain, but I can login with the SBS2000 domain
> selected.