Global Groups Missing from Local Group on Windows 2000 Pro

[Richard Moreno]

Outline:
Native Mode Windows 2000 AD Forest with 1 root domain and 3 child domains; I
manage 1 child domain. Several thousand workstations and user accounts have
been migrated from an old Multi-Master NT Domain Model (user accounts) with
Resource Domains (servers, local services) to this new AD Forest and have
been operating fine thus far. ALL User accounts and computer accounts are
now in the AD Domain. (More specifically the child domain I manage, this is
also the domain they logon to.)

Problem:
W2K Pro workstations are now suddenly missing a domain global group from the
local administrators group that was previously there.

No GPO's are in place at OU or Site levels; 1 GPO exists at the forest root
for all domains for account policies only. Transitive trusts are in place
throughout the forest, FRS replication is good, sysvol directories are
synced and appear uncorrupted.)

Has anyone come across this? Have any ideas or tips?

Thanks
Richard

 

[Steven Umbach]

If someone configured restricted groups at the domain/OU level for the
administrators group, that could account for it. You might also want to post in
the win2000.active_directory newsgroup. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;q279301