Domain Local, global groups

[mrmoneymatters]

I have something weird going on.

I have always read that you should put accounts in global groups, global groups in domain local groups, and give domain local groups access to resources.

I took over this network about 8 months ago and the only thing used was global groups to give permissions. So I have started reorganizing groups and created some domain local groups. When I am trying to add permissions on a resource and browse groups to add, none of the domain local groups are showing up. What is going on?

 

[mrmoneymatters]

Update, this only happens if you are browsing for a W03 server or XP machine. I can log on to a w2k server and try to add groups for security to resources and all groups show up. When I do this from an XP machine or 03 server, domain local groups don't show up. Did something change with 03 and XP or what?

 

[mrmoneymatters]

anyone have ideas, I did some searching but found nothing.

 

[mrmoneymatters]

Domain local groups are not available in member servers or workstations while in mixed mode."

This is what I found.