Local users and groups in Active Directory

[therealtalkinggoat]

I have a windows 2000 advanced server setup that is the PDC of a small domain. If you go to local users and groups, on the PDC, it will give you a red "X" and say that you cannot manage local users and groups because it is a domain controller.

I seem to rember that the client (non server) machines could do this as well; I just can't seem to rember how to get them to do it.

Is there any way to get the client machines to work straight off of active directory on the server and give up the local users and groups?

 

[Andreh]

When you create a Domain Controller (PDC is Windows NT as there is no such thing as a "Primary" Domain Controller in Win2k), no local configuration for local users and groups is provided hence the red "X".

You need to go to the Administrative Tools in the Control Panel and use the snap-in "Active Directory Users and Computers". This is the area you can create user accounts that a apart of the Domain's Active Directory.

This link should give you a good head's up on some of the config's available there.

http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/manadsteps.asp

Managing users this way will allow for much more security across the network. It will also provide a central management location on the network for user accounts.

Hope this helps.

 

[therealtalkinggoat]

Right, the server does this allready, but I want the actual workstation to do the same and have the red "X" on the local users and groups in the computer management section. This way, there can be no local users and groups. Everything must be drawn from the server running AD.