Windows 2000 access denied ?

[F@yy@Z]

I have one machine windows 2000 server installed.

It was stand alone machine and we got some shared folders on that machine
for differrent users.

I promoted that machine to DC and now we cannot access our folders as it
saying access denied.

It shows that local machine users are no more there and only one user DC
administrator is there so how I can acces these folders.

Thanks

 

[Simon Geary]

When you promote a stand alone server to become a DC you lose all the local
accounts. You will need to create domain accounts for each of your users,
join their PC's to the domain and re-share the folders.

 

[ptwilliams]

Hmmm...I thought the local users were upgraded to domain users if this is
the first DC??? I'm sure that was the case on one of my test boxes...

But even so, the SID will be different, thus necessitating changing of the
permissions on the folders/ shares as Simon stated.

--

Paul Williams
_________________________________________
http://www.msresource.net


Join us in our new forums!
http://forums.msresource.net
_________________________________________


When you promote a stand alone server to become a DC you lose all the local
accounts. You will need to create domain accounts for each of your users,
join their PC's to the domain and re-share the folders.

 

[Enkidu]

Hmmm...I thought the local users were upgraded to domain users if this is
the first DC??? I'm sure that was the case on one of my test boxes...

Here's a reference about it. It's still unclear to me!

http://www.microsoft.com/windows200...chinfo/reskit/en-us/distrib/dsbg_dat_udnu.asp

(Please watch the wrap).

Cheers,

Cliff

 

[ptwilliams]

Good link Cliff!!

And here's straight to the point (cut and pasted from
http://www.microsoft.com/windows200...chinfo/reskit/en-us/distrib/dsbg_dat_udnu.asp):

"Migration of Windows NT 4.0 SAM Accounts to Active Directory Objects
When a Windows NT 4.0 domain controller is upgraded to Windows 2000, SAM
security accounts are migrated to Active Directory objects. The relationship
between Windows NT 4.0 accounts and Windows 2000 Active Directory objects is
as follows:

"Normal" user accounts, which represent people, are stored as objects of the
class user in Active Directory.

Computer user accounts (called "machine accounts" in Windows NT 4.0), which
represent devices, are stored as objects of the class computer, which is a
derived class of user and is exposed as the base class user to clients and
domain controllers that are running earlier versions of Windows. (For more
information about derived classes and base classes, see "Active Directory
Schema" in this book.) By default, these accounts are placed in the
Computers container after an upgrade, although there is no restriction that
requires computer accounts to be confined to the Computers container. A
control flag on the user account identifies the account type as a server or
workstation, domain controller, or normal user account. Windows 2000
maintains the Windows NT 4.0 semantics (the flags that determine the nature
of objects - for example, a computer versus a user object) for workstation
accounts. "

--

Paul Williams
_________________________________________
http://www.msresource.net


Join us in our new forums!
http://forums.msresource.net
_________________________________________

Hmmm...I thought the local users were upgraded to domain users if this is
the first DC??? I'm sure that was the case on one of my test boxes...

Here's a reference about it. It's still unclear to me!

http://www.microsoft.com/windows200...chinfo/reskit/en-us/distrib/dsbg_dat_udnu.asp

(Please watch the wrap).

Cheers,

Cliff