JSI Tip 6274. How can I add membership to a built-in Domain Local group on a domain controller?

If you delete any membership of a special built-in Domain Local group on a domain controller, there is no obvious way to re-add the membership.

Example:

If you delete Authenticated Users from the Local Users group on a domain controller, you cannot use Active Directory Users and Computers to add Authenticated Users to the Local Users group.

You can use the command line to re-add the membership:

1. Open a CMD.EXE prompt.

2. Type net localgroup users "nt authorityauthenticated users" /add and press Enter.

The Windows 2000 special groups are:

Authenticated UsersAnonymous LogonBatchCreator OwnerCreator GroupDialupEnterprise Domain ControllersEveryoneInteractiveNetworkProxyRestrictedSelfServiceSystemTerminal Server User

NOTE: A user becomes a member of a special group based upon the activity they are performing. A user becomes a member of the Interactive group when they log on locally. They become members of the Network group when they connect to a computer over the netwrk.