Unable to add domain users to the local group

[James Yang]

I am trying to add a domain account to the local
Administrators group on a Windows XP Pro workstation. My
network is Windows 2000 / Active Directory.

On a the workstation:

Administrative Tools > Computer Management > Local Users
and Groups > Groups

I open the Administrator group, then press "Add..." The
only thing in the "From this location" box is the local
machine I'm working on, so I press the "Locations"
button. In the resulting window, there is no other
option to select from. The only icon in that window is
the local machine.

Consequently, I cannot add a domain account to the local
Administrators group.

Notes:

-- The computer has been added to the domain. Active
directory is completely aware of the machine and it
functions normally in the domain aside from this issue.

-- Domain admins are administrators on this computer, so
I know the computer knows what the domain is and can
authenticate against it.

-- When I open the Administrators group and it displays
the members of that group, there are two icons. One is
the standard User icon for the local Admininstrator
account. The other is the same icon with a question mark
in front of it and a name like: "S-1-5-21-1615..." etc.
(it's quite long). I'm assuming this second icon is for
the Domain Admin group.

 

[Richard G. Harper]

The odd user name starting with a question mark and a series of numbers
indicates that a trust is broken between your computer and the domain. Your
computer, if properly a member of the domain, should be resolving that entry
into an entry in the Active Directory user list. Try removing your computer
from the domain and re-joining it, and see if that odd name resolves into a
proper Domain Admins name instead.

 

[Guest]

if your DC is also a DNS server, try adding / making sure
that the DC's address is listed as a dns server in the
LAN connection properties.

-----Original Message-----
The odd user name starting with a question mark and a series of numbers
indicates that a trust is broken between your computer and the domain. Your
computer, if properly a member of the domain, should be resolving that entry
into an entry in the Active Directory user list. Try removing your computer
from the domain and re-joining it, and see if that odd name resolves into a
proper Domain Admins name instead.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

I am trying to add a domain account to the local
Administrators group on a Windows XP Pro workstation. My
network is Windows 2000 / Active Directory.

On a the workstation:

Administrative Tools > Computer Management > Local Users
and Groups > Groups

I open the Administrator group, then press "Add..." The
only thing in the "From this location" box is the local
machine I'm working on, so I press the "Locations"
button. In the resulting window, there is no other
option to select from. The only icon in that window is
the local machine.

Consequently, I cannot add a domain account to the local
Administrators group.

Notes:

-- The computer has been added to the domain. Active
directory is completely aware of the machine and it
functions normally in the domain aside from this issue.

-- Domain admins are administrators on this computer, so
I know the computer knows what the domain is and can
authenticate against it.

-- When I open the Administrators group and it displays
the members of that group, there are two icons. One is
the standard User icon for the local Admininstrator
account. The other is the same icon with a question mark
in front of it and a name like: "S-1-5-21-1615..." etc.
(it's quite long). I'm assuming this second icon is for
the Domain Admin group.

.