Local group in passive-active cluster

Is there a way to replicate the local group in a passive-active cluster environtment using M/S cluster in Window2000 advanced server? The reason I asked because we encounter problem in implementing file server using M/S cluster. We always have to manually create identical local group on both machines and then make the cluster fail-over to assign NTFS permission to the share. What we try to do is using the AGLP (Account->Global->Local->Permission) topology on all the shares we created. All suggestions are appreciated.

Anh Nguyen