Local group on NT 4.0 PDC not visible on W2K Pro

[Redfox1]

When I try to assign permission on a share on a Windows 2000 SP3 professional box (member of the domain: DOMAIN) I get "Cannot find group 'ISDept'" error message when I try to assign a Domain Local Group to this share.

Also, NT 4.0 member Servers & Workstations (all SP6a) do not LIST this or similar groups but I CAN assign them to a share's permission on them. (ie. they resolve when I type them in as DOMAIN\<local_group_name>)

ISDept is a local group on an NT 4.0 PDC for DOMAIN
The W2K Pro box is member of DOMAIN

I was under the impression that if you created a &quot;local group&quot; on the PDC, that it WOULD be &quot;visible&quot; ONLY in the DOMAIN!

The only alternative is to use global groups for now... they show up and work fine.

Any thoughts on why this is? Will I run into trouble when I upgrade this Domain & shares to AD?

<I inherited these shares & groups... I would have done the usual A G DL P>

Redfox

 

[Seaspray0]

The standard practice is to create global groups on your domain controllers and add users to those groups. Create local groups on your file and print servers and assign permissions to local groups for shares. Add global groups to local groups so users can access the shares.

 

[Redfox1]

I understand that concept... (see my note on Account Global Group DomainLocal Permission - A G DL P at the bottom of my message.)

I've inverited these permissions and these may be in use who knows where else... (of course I can perform a file level audit to find out...)

What will happen to these Local Groups when the DOMAIN is upgraded to W2K AD?