Microsoft KB Archive/315884

= Built-In Groups Cannot Be Resolved When You Manage a Group Policy in a Windows 2000 Domain =

Article ID: 315884

Article Last Modified on 3/1/2007

-

APPLIES TO


 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Professional Edition

-



This article was previously published under Q315884



SYMPTOMS
When you log on to your Windows 2000-based member computer as a domain administrator and try to manage the group policy of a Windows 2000 domain, you may not be able to see the built-in groups of the Windows 2000 domain. You may also be unable to resolve the SIDs of the built-in groups.



CAUSE
This problem may occur if the domain controller filters out the built-in accounts when it passes information back to the client.



RESOLUTION
To work around this problem, use a Terminal Services client to connect to a domain controller, and then edit the group policy there.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

Keywords: kbenv kbprb kbui KB315884

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.