You are not crazy and this does happen in Native Mode (or else I'm crazy too
- a distinct possibility).  There is an issue with displaying all
appropriate groups in some of the "Group Picker" forms.  At the site I'm at
(a regional power conglomerate), all of our groups start with "DL-" or "DG-"
so we can keep them straight.  When trying to add a group to a member
server, we were only being offered domain global,"DG-", groups in the list
provided through the standard "look-in domain" GUI.  Turns out that you can
add a domain local group by typing the group name in manually, overriding
the GUI. It's an interface issue, not a functionality problem.  This is in a
domain that was upgraded from NT4, if that matters.

One of my customer's staff spoke to MS (Premier Support) and was told that
this is a known issue to be fixed post-SP3.  Sorry, since I wasn't the
person talking to MS, I don't have an article number to share.

David J. Dove 
Principal Technology Consultant 
The Paloma Group, Inc. 
Office:   (860) 553-6600
Mobile:   (860) 559-9001 
Fax:      (860) 553-6601

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A.
Sent: Wednesday, June 11, 2003 9:46 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Group Permissions - Disregard this e-mail

I must be crazy, I just tried to add a domain local group to a non domain
controller folder and was able to.  There was one time in the past that I
wasn't able to but I guess it was a fluke.  I had not ever tried it since.
Thank you anyway.

 -----Original Message-----
From:   Salandra, Justin A.  
Sent:   Wednesday, June 11, 2003 8:58 AM
To:     ActiveDir (E-mail)
Subject:        [ActiveDir] Group Permissions

Hi,

If you grant a domain local group rights to a share on a domain controller,
say a share called workgroup, and you then dcpromo down that server to a
member server of the same domain, will the domain local groups be converted
to local groups?  It has been my experience that you cannot use domain local
groups on non domain controllers.

Thanks

Justin A. Salandra, MCSE
Senior Network Engineer
Catholic Healthcare System
212.752.7300 primary office
917.455.0110 cell
[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> 

List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/



List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to