Nested Groups in 2003

richardbruce · 11-29-2007, 08:39 AM

I have recently taken over a Sysadmin position and decided to try and implement groups in our AD to administer shared resources.

I have 2 2003 servers in a single domain and both are DCs. I had to raise the domain functional level as it was still sitting as Mixed but is now at 2003.

I can create groups and add users to them with no problems. I can also allocate these groups to shared folders with no issues. My problem rises when I try to nest groups. If I nest one group inside another I cannot get access to any shared folders I give that group permissions to! (eg I have a group G sysadmin which only has one user in it, if I then nestthat group inside a Domain Local group ,say DL sysadmin, and then give the DL sysadmin group full control to the Sysadmin share I have created I get an access denied error BUT if I only add the G sysadmin group tothe share I get access no problem!) any ideas??? Please tell me I don't need to reboot my servers after raising the functional level!

Basically I get the same error no matter what if I nest one group inside another!

richardbruce · 11-30-2007, 03:26 AM

ok...no idea what the feck has happened overnight...BUT now nested groups are working exactly as they should be!

11-29-2007, 08:39 AM	#1 (permalink)
richardbruce Registered User Join Date: Nov 2007 Posts: 20 OS: XP Sp2	Nested Groups in 2003 I have recently taken over a Sysadmin position and decided to try and implement groups in our AD to administer shared resources. I have 2 2003 servers in a single domain and both are DCs. I had to raise the domain functional level as it was still sitting as Mixed but is now at 2003. I can create groups and add users to them with no problems. I can also allocate these groups to shared folders with no issues. My problem rises when I try to nest groups. If I nest one group inside another I cannot get access to any shared folders I give that group permissions to! (eg I have a group G sysadmin which only has one user in it, if I then nestthat group inside a Domain Local group ,say DL sysadmin, and then give the DL sysadmin group full control to the Sysadmin share I have created I get an access denied error BUT if I only add the G sysadmin group tothe share I get access no problem!) any ideas??? Please tell me I don't need to reboot my servers after raising the functional level! Basically I get the same error no matter what if I nest one group inside another!

11-30-2007, 03:26 AM	#2 (permalink)
richardbruce Registered User Join Date: Nov 2007 Posts: 20 OS: XP Sp2	Re: Nested Groups in 2003 ok...no idea what the feck has happened overnight...BUT now nested groups are working exactly as they should be!