Microsoft Knowledge Base Article
This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved.
Terms
of Use |
Trademarks
Article ID: 296369 - Last Review: January 3, 2003 - Revision: 2.0
Domain Local Groups Cannot Be Used in Mixed-Mode Domain
This article was previously published under Q296369
If you use Microsoft Windows 2000 domain local groups to grant workspace or folder role permissions, when group members attempt to gain access to the secured content, those group members may receive "access denied" error messages. If you grant the role permissions to the domain user accounts individually, the users can gain access to the secured content.
This problem can occur if your Windows 2000 domain is operating in mixed mode; in mixed mode, the scope of a domain local group is limited to the domain controllers only. The domain local group is not valid for member servers; however, the user picker that is displayed when you assign security to SharePoint Portal Server resources does not filter out the domain local group entries that are not valid.
To resolve this problem, use domain global groups to assign security roles to folders if your Windows 2000 domain is running in mixed mode.
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.
APPLIES TO
- Microsoft SharePoint Portal Server 2001
Community Feedback System
Very often, it takes hours to solve a problem. Very often, you've looked high
and low, and have tried a lot of solutions. When you finally found it, chances
are, it was because someone else helped you. Here's your chance to give back.
Use our community feedback tool to let others know what worked for you and what
didn't.
Please also understand that the community feedback system is not warranted to be
correct, it's simply a system that we've built to let people try and help each
other. If something in a feedback response doesn't make sense to you, or you're
not comfortable making changes that the feedback talks about (like registry
edits), please consult a professional.
Thank you for using kbAlertz.com Feedback System.
-- Scott Cate