Missing Builtin Group

  • Thread starter Thread starter tpeltz
  • Start date Start date
T

tpeltz

The builtin group called Pre-Windows 2000 Compatible Access is missing
in my Active Directory domain. Can anyone tell me how to recreate it?

I am unable to complete a domainprep for Windows 2003 because of the
following error.

Adprep failed in the attempt to add the Anonymous Logon SID to the
Pre-Windows 2000 Compatible Access group.

Thanks
 
Though I have not had that exact problem I believe it could be two things. That the
Pre-Windows 2000 Compatible group does not include the everyone group and/or the
everyone group has been configured no to contain anonymous logon. Both of those are
usually desirable, so you may want to change them back once you are done. Always
document your changes with time, date, and reason. For the first item the everyone
group needs to be added to the Pre-Windows 2000 Compatible which can be done via the
command line on a domain controller as in net localgroup "Pre-Windows 2000
Compatible Access" everyone /add. The other is a security option then needs to be
changed in Domain Controller Security Policy /security settings/local
policies/security options for Network access: Let Everyone permissions apply to
anonymous users which may need to be enabled.. The last link explains Windows 2003
security options and recommends settings based on network configuration. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;278259
http://support.microsoft.com/default.aspx?scid=kb;en-us;303973
Network access: Let Everyone permissions apply to anonymous users
 
Back
Top