Iphone

I am rolling out a new Server 2003 Enterprise server. It is the DC and has already been promoted and had domain users added.

I created a security group in AD named it Local Workstation Administrators and added all my domain users to that group. I did this so that I could add the above mentioned group to the Administrators group on the local PC. I need my end users to log into the domain, but have local workstation admin rights and this is how i have done it on other domains.

Now, when I go to my first PC and try to complete this task, I cannot add the domain\local workstation administrators group to my local PC administrators group. I cannot do this because I cannot "see" the domain users. Under Locations, the only location showing is the local PC name and I cannot change it. I can (and have) joined the PC to the domain, but I cannot add this domain group to the local PC group. I cannot seem to change locations from local PC to the required domain.

I was thinking that this is happening because the local PC doesn't know the domain is out there. What I mean by that is that all PCs in the building right now, including the one I'm working on, are using the router/gateway and that is in turn using the DNS of the local ISP. So, the PC I am working on is getting it's DNS from 192.168.0.1, which is my router/gateway. So, I figure my PC doesn't know where my new domain is so it can't pull a users list from it. However, I cannot be certain, hence my post.

Anyone have any thoughts on this?

Iphone

Its DNS........

you have to point to only your internal DC as the DNS server otherwise this sort of thign will just get worse