Error attempting to add domain user to local admin group

[TroyBeynon]

I am receiving the following error when I attempt to add a domain user INTSOL\besadmin to a Windows 2003 member servers' administrators group. Information returned from the object picker for object "besadmin" was incomplete. The object will not be processed.

The following has been checked thus far:

1. Check TCP/IP of member server to ensure that DNS IP address is pointing to internal DNS server.

2. On the DC I ran netdiag and dcdiag to ensure AD was functioning correctly. No errors to report.

Anyone have any thoughts on this?

 

[basst]

There is a KB article relating to your error.
Will need more information on your setup if this is not relavent to your setup:

http://support.microsoft.com/kb/908479/en-us

 

[TroyBeynon]

More information listed below.

IS-DCXNGE - Windows 2003 standard - (INTSOL) Domain Controller with Service Pack 1. Installed - AD, DNS, WINS, TS License, and Exchange 2003 SP2. Group Policy Management is running on the DC.

IS-FS1 - Windows 2003 standard - Member Server
Service Pack 1. Trying to add user INTSOL\besadmin to the local machines administrators group on IS-FS1.

If you need more details please let me know.

 

[mrdenny]

You can't add a user from one server to a group of another server.

Local users are local to the hosting machine only and can not be used accross machines. In order to do this create a domain account and add it to both machines and have the needed services run under that machine.

Denny
MCSA (2003) / MCDBA (SQL 2000) / MCTS (SQL 2005) / MCITP Database Administrator (SQL 2005)

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com

 

[mrdenny]

needed services run under that machine.

should read "needed services run under that account.

Sorry I'm sick.

Denny
MCSA (2003) / MCDBA (SQL 2000) / MCTS (SQL 2005) / MCITP Database Administrator (SQL 2005)

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com

 

[TroyBeynon]

You can if the server you are getting the account from is a domain controller with active directory installed. IS-DCXNGE is the DC with AD and the IS-FS1 member server is the server that is part of the domain/AD.

 

[basst]

First thing i would apply the latest service packs then try again.