add domain admins into local admins group for xp

[rix]

Hi everyone,

I am running a problem as:
we have ads with two domain (Domain A and Domain B) all
the workstation within these two domains are xp and 2000.
From domain B I edit the group policy -> computer
configuration -> restricts group and add the Domain
admins for Domain A as the local administrators group.

It work for 2000 box and no luck for the xp.
I check the winlogon.log file from %windir%\security\log
folder and notice the following message:

Configure Group Membership...
Configure DomainA\Domain Admins.
No system mapping was found for Domaina\Domain
Admins.
Group Membership configuration was
completed successfully.

Anyone suggestion or thought why xp does not work?
many thanks in advance

 

[Jdrew [MS]]

Hey Rix,

I would think if it works for Windows 2000, it should also work for Windows
XP. However, I would check to see what Windows DC is the Network
Infrastrure FSMO role holder and a nearby GC and make sure that the
Windows XP computer can access both, since these are what allow the
mappings to take place.

Jim

 

[rix]

I found the answer, it is in the knowledgebase article
810076
thanks