this is a 2000 functional level domain :( :( :( *
I have a domain local security group in domain A which contains 1 user from a domain B and several from domain A.
On a server in domain A, I can add this domain local group to the local machine administrators group via 'net localgroup', however, after doing this I notice that the members of that group aren't being given local admin permissions (can't remote login, etc).
When I look at local groups via the computer mgmt gui I can see the domain local group. I tried to delete and add it back via the gui, however, the domain local group can't be found. I can see all the global groups, but not any domain local.
I've searched and can't find anything that indicates this shouldn't work.
Should I be able to add a domain local security group to a local machine administrators group? If so, why would I not be able to find the object using the group management gui?