Active Directory issue on XP Pro

  • Thread starter Thread starter Jason Paris
  • Start date Start date
J

Jason Paris

Hi all,

My organisation recently implemented Win2003 SBS, which is our sole
Domain Controller across a 3-site WAN.

We've decided to add the Domain Users group to the local Admin group
on some XP Pro workstations at each of the 3 sites.

At site #1 (where the server physically resides) this was no problem.
We:

* Opened Computer Manager on the workstations
* Chose Local Users & Groups / Groups
* Right-clicked 'Administrators' / Add to Group / Add

......and the 'Select Users or Groups' box appears.

In the 'Enter the object names to select area' we typed 'Domain
Users', clicked 'Check Names'..... and voila!

However, when we try this on *any* PC in the other two subnets, the
'Check Names' step fails.

We click 'Locations' and discover that, for this process, the AD tree
is invisible. Indeed, only the LOCAL MACHINE is visible as an object
in the 'Locations' box.

This is curious, because to begin the process we authenticated *to the
Domain* with full Domain Admin access.

If anyone has any suggestions they'd be gratefully received.

Thank you,

Jason Paris
 
The first thing to do is to verify that the client machines are
(as is necessary for all machines in a domain) using o=_only_
DNS servers able to resolve the AD supporting DNS zones.
This probably means to make sure that they are using only
your SBS DC which runs DNS and holds a *.local zone for
your Active Directory.
 
Back
Top