And you must be in native mode for the domain otherwise the domain local groups have the same scope as they do in NT4.
Note that I think some of the other notes captured this but some security pickers do not correctly allow you to select domain local groups on member machines, the most notable exception that comes to mind is the rights management in the security policy, you need to use a command line tool to jam the domain local groups into those rights. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Cary, Mark Sent: Wednesday, June 11, 2003 10:55 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Group Permissions Domain Local groups only work on non-DCs in a Windows 2000 or 2003 domain, not in a NT4 domain. -----Original Message----- From: Salandra, Justin A. [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 11, 2003 8:42 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Group Permissions How, I have tried with no luck. -----Original Message----- From: Tony Murray [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 11, 2003 9:26 AM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Group Permissions You can use domain local groups on non domain controllers. ---------- Original Message ---------------------------------- From: "Salandra, Justin A." <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Wed, 11 Jun 2003 08:58:15 -0400 Hi, If you grant a domain local group rights to a share on a domain controller, say a share called workgroup, and you then dcpromo down that server to a member server of the same domain, will the domain local groups be converted to local groups? It has been my experience that you cannot use domain local groups on non domain controllers. Thanks Justin A. Salandra, MCSE Senior Network Engineer Catholic Healthcare System 212.752.7300 primary office 917.455.0110 cell [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ The information contained in this message is confidential and is intended for the addressee(s) only. If you have received this message in error or there are any problems please notify the originator immediately. The unauthorized use, disclosure, copying or alteration of this message is strictly forbidden. Badger Meter, Inc. will not be liable for direct, special, indirect or consequential damages arising from alteration of the contents of this message by a third party or as a result of any virus being passed on. List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
