Built-In Groups Cannot Be Resolved When You Manage a Group Policy in a Windows 2000 Domain (315884)
The information in this article applies to:
- Microsoft Windows 2000 Server
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Professional
This article was previously published under Q315884 SYMPTOMS
When you log on to your Windows 2000-based member computer as a domain administrator and try to manage the group policy of a Windows 2000 domain, you may not be able to see the built-in groups of the Windows 2000
domain. You may also be unable to resolve the SIDs of the built-in groups.
CAUSE
This problem may occur if the domain controller filters out the built-in accounts when it passes information back to the client.
RESOLUTION
To work around this problem, use a Terminal Services client to connect to a domain controller, and then edit the group policy there.
STATUSMicrosoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.
| Modification Type: | Minor | Last Reviewed: | 10/13/2004 |
|---|
| Keywords: | kbenv kbprb kbui KB315884 |
|---|
|