Group membership problems...

[Peter Moberg]

Hello.

I have a very strange problem. I have a domain setup called HOME. As a
domain controller I have a Windows 2003 server. I have only one client and
that is a WinXP machine. I have added a domain user and included the user in
a couple of groups that I have created. The created groups are both domain
local and global groups.

When I log in with the user on my WinXP client and run the tool WhoAmI.exe
(that lists,among other things,group memberships for the current logged-on
user) it doesnt list the user to belong in the created groups. Only the
standard ones like Domain Admin ..Domain User and the Builtin groups are
listed.

When I log on to my domain controller with my user and run the WhoAmI.exe
tool the groups that I have created will be listed.

Does anyone know why my user will not the group membership of the created
domain local and global groups if he logs on to the client machine?

Thanks

Peter

 

[Peter Moberg]

I found the answer myself:

I guess I have my Active Directory running in Mixed Mode and then the Domain
Local Groups have a different behavior then running in Native Mode.

The following knowledge base article explains the differences..

http://support.microsoft.com/defaul...port/kb/articles/Q259/3/92.asp&NoWebContent=1

Basically when running in a mixed mode the Domain Local Groups will only
show up in your access token if you log-on to a domain controller.
If you are running in native mode the Domain Local Groups will show up in
your access token if you log-on to any computer in the domain.

/Peter