General discussion

Locked

Active directory

By ajsdodd ·
Wed May 14, 2003 10:47 AM (NEW!)



I have been been asked if I can help with this problem but am just starting to learn Active directory but am to inexperianced to help....can anyone offer some advice please.

Network running Active Directory as the Domain Controller for a 3 floor building on 3 subnets through a router. When attempting to assign NTFS permissions or Share permissions they can only see Global Groups and not the "Domain Local Groups" that have been setup foreach of the Organisational Units. When browsing the network only the global groups are shown, not the Domain Locals which are needed to sucessfully implement the appropriate permissions and rights for user groups.

Network clients are running Win2k Pro with 3 departmental fileservers and the Domain controller. Servers are running 2k server and the DC is running 2k Adv_Server

They created 3 OU's, 1 for each department, then added all Global and Domain Local Groups into their respective departments (i've got 01_admin, 02_sales/accounts 03_warehousing/stock_control e.g. all admin staff in admin OU as Admin_staff (global) then Admin_diary_softwareaccess as Domain Local. When looking for Admin_diary_softwareaccess to give this Domain Local permission to access the diary software none of the clients of departmental fileservers can see it. Also they tried typing in the Domain Local Group when config'ing the share and selecting "Check Name" but it just give an error that group doesn't exist. If they logon to the DC running Active Directory, they can see the Domain Locals within the respective OU's.

How to see the Domain Locals? or is it a configeration problem?

This conversation is currently closed to new comments.

4 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Active directory

by ND_IT In reply to Active directory

Do you have more than one domain? Domain local groups can only access resources that are in the same domain.

Collapse -

Active directory

by ajsdodd In reply to Active directory

Thank-you for the reply... as your the only one I will award you the points.

Collapse -

Active directory

by ajsdodd In reply to Active directory

I found the answer

Convert AD to "native mode" where it drops all support for NT 4x. As soon as its converted AD to native mode all the Domain Locals could be seen when applying the NTFS/Shares.

Collapse -

Active directory

by ajsdodd In reply to Active directory

This question was closed by the author

Back to Networks Forum
4 total posts (Page 1 of 1)  

Related Discussions

Related Forums