Users added via a domain local group don't get access?

I have a user who isn't added directly to the site but is a member of a domain local group that has been added to the viewers group. The user gets access denied. If I add them to a domain global group in AD and add that domain global group then there is no problem.

Is there a problem giving access to domain local groups (these are not the same as machine local groups) as opposed to domain global groups

Thanks,

Mark




Answer this question

Users added via a domain local group don't get access?

  • Vadivel

    I discovered this was because my domain was working in mixed mode and domain local groups are scoped to the domain controller only in that mode. Switching to native mode solves the problem.

  • Danca

    The Domain NEEDS to be in NATIVE mode for this to work :-)

    Phil


  • Users added via a domain local group don't get access?