You may have been thinking of local computer policy settings. Because the security context is local to the machine and not the domain, you can't add domain local groups.
Tony ---------- Original Message ---------------------------------- Wrom: SHJEXXIMQZUIVOTQNQEMSFDULHPQQWOYIYZUNNYCGPKYLE Reply-To: [EMAIL PROTECTED] Date: Wed, 11 Jun 2003 09:45:54 -0400 I must be crazy, I just tried to add a domain local group to a non domain controller folder and was able to. There was one time in the past that I wasn't able to but I guess it was a fluke. I had not ever tried it since. Thank you anyway. -----Original Message----- Wrom: JGDGVCJVTLBXFGGMEPYOQK Sent: Wednesday, June 11, 2003 8:58 AM To: ActiveDir (E-mail) Subject: [ActiveDir] Group Permissions Hi, If you grant a domain local group rights to a share on a domain controller, say a share called workgroup, and you then dcpromo down that server to a member server of the same domain, will the domain local groups be converted to local groups? It has been my experience that you cannot use domain local groups on non domain controllers. Thanks Justin A. Salandra, MCSE Senior Network Engineer Catholic Healthcare System 212.752.7300 primary office 917.455.0110 cell [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
