I just upgraded all of my domain controllers (2 of them) from Windows 2000 to Windows 2003. The domain itself is still in Windows 2000 native mode.
I just noticed one thing, where, supposed I want to share a folder, and among the groups that I want to share this folder to is the built-in administrators group for the domain (DOMAIN\administrators). I noticed that I can't do that anymore on the member servers that run 2003 because in sharing permissions, when I typed 'administrators' (without quotation mark), and then clicked on 'check names', it says "An Object named Administrators can not be found, check the selected object......", but I could still do that on the domain controllers. I'm just curious is this a new behavior in Windows 2003 member servers, or am I missing something here. Not being able to set permission for DOMAIN\administrators group in sharing the folder is not a big problem for me, because in fact only my username resides in the DOMAIN\administrators group besides of course the default users -> DOMAIN\administrator, Domain Admins, Enterprise Admins. I needed to do that, because it would make it easier back then with Windows 2000 in managing the default security permission on the computers' partition (I just removed 'everyone' group, add SYSTEM, COMPUTER\administrators, and DOMAIN\administrators). For the owner of that computer, I just add his DOMAIN\username to the local COMPUTER\administrators group. Thanks List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
