Local Groups Not Visible

[AshiP]

Hi,

I have just migrated to Active Directory from NT4. I am
currently looking after 22 Servers, two of which are
Domain Controllers. I create a Domain Global Group and a
Domain Local Group then add the Domain Global Group to the
local Group and add users to the Global Group and assign
permissions to the Local group. The problem I am having is
that I can't find the Local Group when browsing AD (say
when adding permissions to a directory). I can see the
Global Groups and the occasional Local Group.

I can see all the groups when browsing on the Domain
Controllers but not from any other servers.

Any help would be greatly apreciated.

Thanks

 

[Herb Martin]

Hi,

I have just migrated to Active Directory from NT4. I am
currently looking after 22 Servers, two of which are
Domain Controllers. I create a Domain Global Group and a
Domain Local Group then add the Domain Global Group to the
local Group and add users to the Global Group and assign
permissions to the Local group. The problem I am having is
that I can't find the Local Group when browsing AD (say
when adding permissions to a directory). I can see the
Global Groups and the occasional Local Group.

If you are not browsing AD directly (e.g., AD User/Computers)
then you cannot see/use "local" groups (of the domain) on non-DCs
in MIXED mode.

Mixed mode continues the NT restriction that "Local Groups"
are only usuable within the precise scope where they are created;
(Fancy way of saying "DCs for local groups of the domain" and
"on the Machine for it's own local groups.")

In Native mode, Domain Local groups are still local to the domain,
but they are then available throughout that domain, on all machines
of the same domain.

I can see all the groups when browsing on the Domain
Controllers but not from any other servers.

 

[Jerold Schulman]

Hi,

I have just migrated to Active Directory from NT4. I am
currently looking after 22 Servers, two of which are
Domain Controllers. I create a Domain Global Group and a
Domain Local Group then add the Domain Global Group to the
local Group and add users to the Global Group and assign
permissions to the Local group. The problem I am having is
that I can't find the Local Group when browsing AD (say
when adding permissions to a directory). I can see the
Global Groups and the occasional Local Group.

I can see all the groups when browsing on the Domain
Controllers but not from any other servers.

Any help would be greatly apreciated.

Thanks

See tip 3963 in the 'Tips & Tricks' at http://www.jsiinc.com for switching to
Native mode.

Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com