Article ID: 932378
Article Last Modified on 5/14/2007
APPLIES TO
- Microsoft Office SharePoint Server 2007
SYMPTOMS
You grant permissions to a domain local group to view a Microsoft Office SharePoint Server 2007 Web site. However, when members of the domain local group try to visit the SharePoint Server 2007 Web site, they receive an error message that resembles the following:
CAUSE
This behavior occurs when the domain local group resides in a mixed-mode domain. Before domain local group members can access a SharePoint Server 2007 Web site, the Active Directory directory service must be running in native mode or running at the Microsoft Windows Server 2003 domain functional level.
In mixed-mode domains, the domain local group can only be used on the domain controller. However, when the domain is run in native mode, the domain local group can be used within the boundary of the domain.
RESOLUTION
To resolve this problem if your existing domain is running in mixed mode, use domain global groups to assign security roles to folders.
REFERENCES
For more information about how to raise domain functional levels in Windows Server 2003, click the following article number to view the article in the Microsoft Knowledge Base:
322692 How to raise domain and forest functional levels in Windows Server 2003
For more information about the limitations of using domain local groups in a mixed-mode domain, click the following article number to view the article in the Microsoft Knowledge Base:
296369 Domain local groups cannot be used in mixed-mode domain
Keywords: kbtshoot kbexpertiseinter kbprb KB932378
