Re: Adding Global Groups to Local

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Herb Martin (news_at_LearnQuick.com)
Date: 04/11/04


Date: Sun, 11 Apr 2004 18:57:27 -0500


"Tony Seaward" <Tony.Seaward@arnorthwest.com> wrote in message
news:1b5cb01c42006$b0cf1330$a101280a@phx.gbl...
> I am logged into my 2003 domain on XP machines, but I
> can't access all the resources needed because when i try
> to add user/groups to the local groups, the only location
> that is available is the local machines, eventhough I log
> into the domain.

Are you perhaps using cached credentials? -- technically
a login to a "domain account" but ONLY for the purposes
of using the local machine.

If you don't see the domain as a choice then you likely are
NOT authenticated with the domain, or the machine cannot
find a DC now.

> Additionally if i change the domain under Computer Name
> which is Company.Local to just Company. It welcomes me to
> the domain, and then I can look up the usernames/groups
> under the domain properly, but soon as I try to add an
> object, it says the Specified domain name is incorrect.

The computer name should NEVER match the Domain
Netbios name etc. even though that it technically legal.

The machine name should be something like NewMachine,
and it's full name should be NewMachine.Company.local.

Also make sure the DNS/WINS settings on the client NIC
point ONLY to the internal DNS(and WINS) servers.

"Clients" include DCs too!!!!! If not, they won't register
and be locatable by the 'real' clients.

> I am assuming it is some configuration on the server
> side. But I could be wrong. Thanks.

-- 
Herb Martin