Only DC's can see Domain Local Groups

[gmail2]

Normally for our security groups, we use Global groups, but I need to implement a more complex structure for a new share I'm setting up and so I've created both Global and Domain Local groups. However, when I try to use the Domain Local group to apply permissions to a resource (folder) the group doesn't appear when I search for it. If I try to give access to a resource on a Domain Controller to the Domain Local group, then it works fine, but the member server's don't seem to want to use it. I've also tried doing \\memberserver from a DC and changing permissions this way, but the same thing happens. Why is this? Why would I only be able to use the group on a DC. Also, the group is definitely a Security Group, not a distribution group.

Would really appreciate some help on this

Irish Poetry - Karen O'Connor
Get your Irish Poetry Published
Garten und Landschaftsbau

 

[gmail2]

Nevermind, I just found out that Domain Local groups can only be used on DC's if the domain is in mixed mode. If it's in Native Mode, then you can use them across the domain

http://www.microsoft.com/technet/pr...erv/reskit/deploy/dgbe_sec_rzdw.mspx?mfr=true

Irish Poetry - Karen O'Connor
Get your Irish Poetry Published
Garten und Landschaftsbau