I get an error when trying to browse my domain 'Access is denied'.

A. If when trying to add users from a Windows 2000 domain to an AccessControl List or a group on a Windows NT 4.0 machine you may receive error:

Unable to browse the selected domain because thefollowing error occurred: Access is denied.

This is caused by incompatible permission settings on the Windows 2000 domainwhich were configured when running the DCPROMO command to create the domain.

When running DCPROMO there was a page which asked which permissions youwanted, if you selected 'Permissions compatible only with Windows 2000servers' then you will experience this problem. To remedy add the Everyonegroup to the 'Pre-Windows 2000 Compatible Access' group and reboot the domaincontroller.

This can be done with the command:

C:> net localgroup "Pre-Windows 2000 CompatibleAccess" everyone /add