Windows 2000 member Server with Win2k3 Active Directory?

[WhatComputer]

Hi to all,

I am having an issue with a test Windows 2000 Member server logging on to a Windows 2003 AD domain. I can add the machine to the sub-domain, but when I log on with Domain or Enterprise Domain rights from a Global Winroot Group, I can not create any local groups or users on this server and get access denied??? I need to get this running since we have Windows 2000 servers that will need to join the Windows 2003 domain at some point during migration.

Thanks..

 

[aftertaf]

you have a parent and a child domain?
which is this server a member of?


have you logged on as local admin on the 2000 server to check if the domain admins are members of the local admins group?



Aftertaf

"Solutions are not the answer." - Richard Nixon

 

[WhatComputer]

Actual what I was trying to was accomplishe, was to be able to create a global group at the Active Directory Winroot level and have it then flow all the way down to sub-domains. Evenutally I wanting this too hit member servers. The problem is that only the Domain controllers in the sub-domain will be contacting Win root for replication, DNS,etc and not the actual member servers. I think the best way to handle this would be to create global group on the DC's referencing the Administrators group on each DC? I can then load this too the member servers local group to be able to suppport them with administration???