Can't add Domain User group to Power Users

[StrandSC]

Everytime I try to add the Domain Users group to the Power Users group I get the Send/Don't send to micorsoft error message.
I can add individual people from the domain, but want to assign the local rights through the group and be done with it. The pc is already added to the domain
To get around it I am adding the user to the power user group individually which gets old and time consuming since I have many workstations to deploy.
I have tried Microsoft's website and can't find anything. I don't have the time to research this hard.
Can anyone point me in the right direction? Thanks!

 

[StrandSC]

Just to clarify, I have admin rights to the domain...

The error report says:
AppName: mmc.exe AppVer 5.1.2600.0 ModName: netapi32.dll
ModVer: 5.1.2600.1106 Offset: 00024e14

 

[wolluf]

does this happen on all machines?

have you tried doing it from command line using net localgroup?

(I've no idea what that error is).

 

[StrandSC]

I have looked up the Net Localgroup commands on Microsofts website; it mentions adding local usergroups to the domain but not localgroups and domain groups to each other. Let me know if I am missing something. I am not familiar with the net localgroup functions...
Thanks so much for your help

 

[temporello]

If mmc.exe causing a problem with netapi32.dll maybe those files are corrupted.
Have you tried to reinstall the OS on your machine?

 

[StrandSC]

Yes. It doesn't matter what machine I use; I get the same result. This only happens on XP machines. We have some 2000 machines on the network and they add those groups without a hitch or glitch. It's only the XP's. I have built numerous machines and images with the same result; even the XP machines that were configured before I was hired. We have NT4 domain controllers, could that possibly have a role in this error?

 

[wolluf]

I thouht you were trying to add domain users to local Power Users group - net localgroup should do that:-

NET LOCALGROUP [groupname [/COMMENT:"text"]] [/DOMAIN]
groupname {/ADD [/COMMENT:"text"] | /DELETE} [/DOMAIN]
groupname name [...] {/ADD | /DELETE} [/DOMAIN]

NET LOCALGROUP modifies local groups on computers. When used without
options, it displays the local groups on the computer.

groupname Is the name of the local group to add, expand, or
delete. Supply only a groupname to view a list of
users or global groups in a local group.
/COMMENT:"text" Adds a comment for a new or existing group.
Enclose the text in quotation marks.
/DOMAIN Performs the operation on the domain controller
of the current domain. Otherwise, the operation is
performed on the local workstation.
name [ ...] Lists one or more usernames or groupnames to add or to
remove from a local group. Separate multiple entries with
a space. Names may be users or global groups, but not
other local groups. If a user is from another domain,
preface the username with the domain name (for
example, SALES\RALPHR).
/ADD Adds a groupname or username to a local group. An account
must be established for users or global groups added to a
local group with this command.
/DELETE Removes a groupname or username from a local group.

 

[bcastner]

I have used Sysinternals PsExec in conjuction with wolluf's suggestions to push these changes in a Domain.

http://www.sysinternals.com/ntw2k/freeware/psexec.shtml

 

[StrandSC]

I have been swamped with other issues. I will try this and post sometime today or tomorrow when I have time.
Thank you guys for your time.